80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.006522][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.016305][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.026097][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.035875][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:38 executing program 2: 14:14:38 executing program 5: [ 407.059989][T13469] input: syz1 as /devices/virtual/input/input76 [ 407.066580][T13469] input: failed to attach handler leds to device input76, error: -6 14:14:39 executing program 0: 14:14:39 executing program 5: 14:14:39 executing program 2: 14:14:39 executing program 0: 14:14:39 executing program 5: 14:14:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r0, &(0x7f0000000900)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'dummy0\x00', 0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r5, &(0x7f0000000900)) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f00000000c0)) shmctl$SHM_UNLOCK(r4, 0xc) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0xffffffffffffffff) 14:14:39 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:39 executing program 2: 14:14:39 executing program 0: 14:14:39 executing program 5: [ 407.891457][ C1] sd 0:0:1:0: [sg0] tag#903 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.902407][ C1] sd 0:0:1:0: [sg0] tag#903 CDB: Test Unit Ready [ 407.908958][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.918942][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.928732][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.938615][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.948597][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.958552][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.968522][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.978831][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:14:39 executing program 2: 14:14:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000040)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 407.988633][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.998420][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.008193][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.017977][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.027744][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:39 executing program 0: [ 408.051802][T13496] input: syz1 as /devices/virtual/input/input77 [ 408.058270][T13496] input: failed to attach handler leds to device input77, error: -6 14:14:40 executing program 5: 14:14:40 executing program 0: 14:14:40 executing program 2: 14:14:40 executing program 5: 14:14:40 executing program 0: 14:14:40 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:40 executing program 5: 14:14:40 executing program 2: 14:14:40 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r0, &(0x7f0000000900)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) r3 = signalfd(r2, &(0x7f0000000040)={[0x9]}, 0x8) fstat(r3, &(0x7f0000000900)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r5, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:14:40 executing program 0: [ 409.060380][ C0] sd 0:0:1:0: [sg0] tag#925 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 409.070992][ C0] sd 0:0:1:0: [sg0] tag#925 CDB: Test Unit Ready [ 409.078155][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.088685][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.098966][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.108826][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.119257][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.129162][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.139360][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.149122][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.158886][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.168991][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.178955][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.189279][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.200583][ C0] sd 0:0:1:0: [sg0] tag#925 CDB[c0]: 00 00 00 00 00 00 00 00 [ 409.225763][T13527] input: syz1 as /devices/virtual/input/input78 [ 409.232284][T13527] input: failed to attach handler leds to device input78, error: -6 14:14:41 executing program 2: 14:14:41 executing program 5: 14:14:41 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:41 executing program 0: [ 409.599708][T13541] input: syz1 as /devices/virtual/input/input79 [ 409.606203][T13541] input: failed to attach handler leds to device input79, error: -6 [ 409.699971][ C0] sd 0:0:1:0: [sg0] tag#945 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 409.711109][ C0] sd 0:0:1:0: [sg0] tag#945 CDB: Test Unit Ready [ 409.717839][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.727633][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.737373][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.747202][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.757039][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.766917][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.776888][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.787131][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.798272][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.808146][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.818164][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.828013][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.837848][ C0] sd 0:0:1:0: [sg0] tag#945 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:41 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:41 executing program 5: 14:14:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) dup(r1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:14:41 executing program 2: [ 410.029137][T13553] input: syz1 as /devices/virtual/input/input80 [ 410.035767][T13553] input: failed to attach handler leds to device input80, error: -6 [ 410.076923][ C0] sd 0:0:1:0: [sg0] tag#904 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 410.087464][ C0] sd 0:0:1:0: [sg0] tag#904 CDB: Test Unit Ready [ 410.094197][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.104249][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.114175][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:14:41 executing program 0: [ 410.123925][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.133691][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.143866][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.153639][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.163394][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.173260][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.183661][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.194393][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.204580][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.214516][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:42 executing program 5: 14:14:42 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:42 executing program 2: 14:14:42 executing program 0: [ 410.576012][T13571] input: syz1 as /devices/virtual/input/input81 [ 410.582703][T13571] input: failed to attach handler leds to device input81, error: -6 14:14:42 executing program 5: 14:14:42 executing program 2: 14:14:42 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x204000, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:14:42 executing program 0: [ 410.855260][T13582] input: syz1 as /devices/virtual/input/input82 [ 410.862511][T13582] input: failed to attach handler leds to device input82, error: -6 [ 410.900205][ C0] sd 0:0:1:0: [sg0] tag#922 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 410.910787][ C0] sd 0:0:1:0: [sg0] tag#922 CDB: Test Unit Ready [ 410.917587][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.927330][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.937095][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.946888][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.956707][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.966470][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.976230][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.986600][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.997190][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.006951][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.016725][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.027436][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.037177][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[c0]: 00 00 00 00 00 00 00 00 [ 411.044937][ C0] sd 0:0:1:0: [sg0] tag#939 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 411.055422][ C0] sd 0:0:1:0: [sg0] tag#939 CDB: Test Unit Ready [ 411.062034][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.071701][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.081460][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.091207][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.100967][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.110730][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.120572][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.130316][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.140052][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:14:43 executing program 2: [ 411.149798][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.159635][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.169476][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.179315][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:43 executing program 5: 14:14:43 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:43 executing program 0: [ 411.392858][T13596] input: syz1 as /devices/virtual/input/input83 [ 411.399426][T13596] input: failed to attach handler leds to device input83, error: -6 14:14:43 executing program 2: 14:14:43 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 411.711327][T13608] input: syz1 as /devices/virtual/input/input84 [ 411.718124][T13608] input: failed to attach handler leds to device input84, error: -6 14:14:43 executing program 0: 14:14:43 executing program 5: [ 411.832043][ C0] sd 0:0:1:0: [sg0] tag#901 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 411.843001][ C0] sd 0:0:1:0: [sg0] tag#901 CDB: Test Unit Ready [ 411.849722][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.859541][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.869498][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.879308][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.889822][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.899638][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.909447][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.919296][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.929187][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.939001][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.948840][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.959084][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.968905][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[c0]: 00 00 00 00 00 00 00 00 [ 411.976809][ C0] sd 0:0:1:0: [sg0] tag#916 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 411.987389][ C0] sd 0:0:1:0: [sg0] tag#916 CDB: Test Unit Ready [ 411.994076][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.004178][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.014085][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.023901][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.033720][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.043575][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.053391][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.063189][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.072990][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:14:43 executing program 2: 14:14:43 executing program 0: [ 412.082806][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.092623][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.102428][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.112374][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:44 executing program 2: 14:14:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r4, &(0x7f0000000900)) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0x3f, 0x2, 0x4, 0x0, 0x9819, {0x77359400}, {0x3, 0xc, 0x7, 0x9, 0x7, 0xff, "5bfda85b"}, 0x101, 0x0, @planes=&(0x7f0000000040)={0x3, 0x93b, @fd=r4, 0x3f}, 0x3, 0x0, r0}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) migrate_pages(r3, 0x100000003, &(0x7f0000000000)=0x7ffffbff, &(0x7f0000001ac0)=0x8) 14:14:44 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:44 executing program 5: 14:14:44 executing program 0: 14:14:44 executing program 2: [ 412.570306][ C0] sd 0:0:1:0: [sg0] tag#930 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.580841][ C0] sd 0:0:1:0: [sg0] tag#930 CDB: Test Unit Ready [ 412.587507][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.597262][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.606982][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.617035][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.626780][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.636717][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.646464][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.656219][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.665968][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.675734][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.685491][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.695230][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.704963][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:44 executing program 5: [ 412.745189][T13630] input: syz1 as /devices/virtual/input/input85 [ 412.751688][T13630] input: failed to attach handler leds to device input85, error: -6 14:14:44 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:44 executing program 0: 14:14:44 executing program 5: 14:14:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:14:45 executing program 5: [ 413.170998][T13650] input: syz1 as /devices/virtual/input/input86 [ 413.177662][T13650] input: failed to attach handler leds to device input86, error: -6 14:14:45 executing program 2: [ 413.343089][ C0] sd 0:0:1:0: [sg0] tag#899 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 413.353633][ C0] sd 0:0:1:0: [sg0] tag#899 CDB: Test Unit Ready [ 413.360196][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.370635][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.380378][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.390235][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.400134][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.409885][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.419640][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.429500][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:14:45 executing program 0: [ 413.439247][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.449016][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.458889][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.469001][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.478758][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:45 executing program 5: 14:14:45 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:45 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010102, @multicast1, r5}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x800000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:14:45 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) readv(r0, &(0x7f0000000580), 0x3c1) [ 413.767666][T13668] kvm [13667]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000079 data 0xffffffff0000ffe2 [ 413.803415][T13668] kvm [13667]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000002f data 0xffffffff0000ff6f [ 413.863712][T13673] input: syz1 as /devices/virtual/input/input87 [ 413.870408][T13673] input: failed to attach handler leds to device input87, error: -6 14:14:45 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) pipe(0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0x0) close(r1) [ 414.076907][ C0] sd 0:0:1:0: [sg0] tag#916 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 414.087597][ C0] sd 0:0:1:0: [sg0] tag#916 CDB: Test Unit Ready [ 414.094351][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.104225][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.114124][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.123886][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.133739][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.143473][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.153208][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.163382][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.173177][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.182941][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.193043][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.203028][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.213823][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:14:46 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffd5b, @mcast1, 0x3}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) 14:14:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000180)) [ 414.523380][ C1] sd 0:0:1:0: [sg0] tag#936 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 414.533997][ C1] sd 0:0:1:0: [sg0] tag#936 CDB: Test Unit Ready [ 414.540580][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.550418][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.560713][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.570579][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.580429][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.590251][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.600075][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.609921][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.619819][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.629809][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.639624][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.649482][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 414.659332][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:46 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x26101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:14:46 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) readv(r0, &(0x7f0000000580), 0x3c1) [ 414.707313][T13705] input: syz1 as /devices/virtual/input/input88 [ 414.714304][T13705] input: failed to attach handler leds to device input88, error: -6 14:14:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:14:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r4, &(0x7f0000000900)) fsetxattr$security_evm(r4, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02db6a017132fffbf1dfd273f49021c3ea24ef"], 0x13, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x1, 0x0, r1, 0x0, &(0x7f0000000040)={0x990a2e, 0x2, [], @value64=0xffffffff00000001}}) r5 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x9, 0x20400) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000000900)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000140)={{0x3, 0x0, @identifier="78b5769d3557d6fef894410cea2b3349"}}) semget$private(0x0, 0x3, 0x8) keyctl$set_timeout(0xf, 0x0, 0x7ff) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f00000000c0)=0x4) 14:14:47 executing program 2: 14:14:47 executing program 5: 14:14:47 executing program 2: 14:14:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:14:47 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 14:14:47 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x600000000000000) [ 416.140661][ C1] sd 0:0:1:0: [sg0] tag#955 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 416.151377][ C1] sd 0:0:1:0: [sg0] tag#955 CDB: Test Unit Ready [ 416.158260][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.169854][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.179686][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.189756][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.199611][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.209421][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.219249][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.229227][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.239299][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.249231][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.259187][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.269043][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 416.279401][ C1] sd 0:0:1:0: [sg0] tag#955 CDB[c0]: 00 00 00 00 00 00 00 00 14:14:48 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x26101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 416.307703][T13750] input: syz1 as /devices/virtual/input/input89 [ 416.315243][T13750] input: failed to attach handler leds to device input89, error: -6 14:14:48 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) readv(r0, &(0x7f0000000580), 0x3c1) 14:14:48 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0305302, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 14:14:48 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 14:14:49 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40505330, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 14:14:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x20000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000140)="13797855798b62a05ba4b7aba5da4c0ec7616879c4146d253c2c4b25d61ed3bee14e47bf93d92e784dda22a014c6e0235143b3a3a74fd44ad9cea3a615094a7af21819b6fb13a3305fb7c65eee03c6e296fd608cd7b93146defb504a80d609cb1487acb761277dbf34f8daacd1ed77fbec54b2d2e29242e2a09ba51e80f397459d07f0142abbd0cb0e203a5ded863156c2cf15857f42d61c225048abd85e90") r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r4, &(0x7f00000004c0)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x8, 0x3, 0x4, 0x40000, 0x8, {}, {0x2, 0x2, 0xda, 0xd1, 0xdc, 0xae, "2543ae8f"}, 0x7, 0x4, @userptr=0x1, 0x6, 0x0, r4}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x98fa}}, 0x5, 0x9}, &(0x7f0000000340)=0x90) connect$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, @none, 0x80}, 0xa) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(0x0, 0x100000000006, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000400)=0x2) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="0c0c028000000000fc020000000000000000000000000081ff01000000000000000000000000000100000000000000fbffffffffffffff01fe80000000000000000000b3000000bbff020000000000000000000000000001ff010000000002000000000000000001"], 0x68) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000000900)) r7 = fcntl$getown(r6, 0x9) migrate_pages(r7, 0xa, &(0x7f0000000040)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:14:49 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 417.580025][ C1] sd 0:0:1:0: [sg0] tag#911 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 417.590827][ C1] sd 0:0:1:0: [sg0] tag#911 CDB: Test Unit Ready [ 417.597618][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.607452][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.617556][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.627366][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.637275][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.647409][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.657415][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.667438][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.677492][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.687448][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.697303][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.707780][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 417.717702][ C1] sd 0:0:1:0: [sg0] tag#911 CDB[c0]: 00 00 00 00 00 00 00 00 [ 417.735260][T13792] input: syz1 as /devices/virtual/input/input90 [ 417.741704][T13792] input: failed to attach handler leds to device input90, error: -6 14:14:49 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40505331, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 14:14:50 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x26101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:14:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r0, &(0x7f0000000900)) write$vhci(r0, &(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, "d2f4fa336b00b5f46beabb2a48aa4e470691b9ae10b5de7557c86dee76fabb293685debdd52ab37846c9e3cb54ecf89dfb086567512a3c7653f017ac3eda3caf96f1ba6528f2c75d5ef3dfd0cfeed8e074225a82ee7f31a63449b18666ccb4b978e696f248e70eb7d44d0404780a8d26d5ae079dccad7f6e3c34708a6d96cf5b9346178a58405ece97d46c799a2ddabe630c4a0fdd55484d9f1d91703d15cb34d5d01b48573eb5a6a2b3c55209fcc9adeb0ee7b515b5d4a8eb5b622128"}, 0xbe) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = clone3(&(0x7f0000001680)={0x40040300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:14:50 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x3da, 0x4000000) 14:14:50 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 418.693946][T13815] IPVS: ftp: loaded support on port[0] = 21 [ 419.028231][ C1] sd 0:0:1:0: [sg0] tag#927 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 419.035432][T13821] IPVS: ftp: loaded support on port[0] = 21 [ 419.039215][ C1] sd 0:0:1:0: [sg0] tag#927 CDB: Test Unit Ready [ 419.051621][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.061485][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.071354][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.081182][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.091010][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.101101][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.110906][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.120754][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.130606][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.140394][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.150158][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.159934][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 419.169691][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[c0]: 00 00 00 00 00 00 00 00 [ 419.187146][T13845] input: syz1 as /devices/virtual/input/input91 [ 419.193788][T13845] input: failed to attach handler leds to device input91, error: -6 14:14:51 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:14:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}) fchown(r0, r4, r6) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:14:51 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 420.039784][T13884] input: syz1 as /devices/virtual/input/input92 [ 420.048071][T13884] input: failed to attach handler leds to device input92, error: -6 14:14:53 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 14:14:53 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x26101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:14:53 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:14:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000040)) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:14:53 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 421.732713][T13902] input: syz1 as /devices/virtual/input/input93 [ 421.739271][T13902] input: failed to attach handler leds to device input93, error: -6 14:14:54 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:54 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 422.476101][T13922] input: syz1 as /devices/virtual/input/input94 [ 422.483318][T13922] input: failed to attach handler leds to device input94, error: -6 14:14:54 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:54 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x26101) ftruncate(r1, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) [ 423.054387][T13935] input: syz1 as /devices/virtual/input/input95 [ 423.061051][T13935] input: failed to attach handler leds to device input95, error: -6 14:14:55 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:14:55 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:55 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x26101) ftruncate(r1, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) [ 423.516910][T13950] input: syz1 as /devices/virtual/input/input96 [ 423.524588][T13950] input: failed to attach handler leds to device input96, error: -6 14:14:56 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x512, 0x82000) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000000380)={0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'lc\x00', 0x10, 0x80000001, 0x2d}, 0x2c) r6 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r7, 0x0, 0x70bd2d, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7ff}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'team0\x00'}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044044) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x90, r7, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_IE={0x67, 0x2a, "8cb11746da7be9e8b5d14bde4af5512e1098b21714c9d1df99e53f62007b3fc4e003ee1b9d84d303277665b9570186e45fb202cdfd54fa3007411c20c6586773aad39e50d65448e1b3a8b57159937082556ef0a2b2af267b4b28f32919ad60d0b6573c"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac11, 0xfac10]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000003c0)) creat(&(0x7f0000000000)='./file0\x00', 0x108) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') 14:14:56 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) dup2(r3, r2) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:14:56 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:56 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x26101) ftruncate(r1, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) 14:14:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r3}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={r3, 0x7f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={r3, 0xffffff00, 0x20}, &(0x7f0000000240)=0xc) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r5, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xc0240, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') dup3(r0, r6, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r8, &(0x7f0000000900)) ioctl$TIOCNOTTY(r8, 0x5422) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c091}, 0x400c040) [ 424.813806][T13964] input: syz1 as /devices/virtual/input/input97 [ 424.820305][T13964] input: failed to attach handler leds to device input97, error: -6 14:14:57 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:14:57 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x26101) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000) 14:14:57 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) dup2(r3, r2) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 425.511201][T13992] input: syz1 as /devices/virtual/input/input98 [ 425.518390][T13992] input: failed to attach handler leds to device input98, error: -6 14:14:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ecb-cast5-avx,wp256)\x00'}, 0x58) 14:14:57 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:57 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x26101) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000) 14:14:57 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) dup2(r3, r2) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 426.171390][T14014] input: syz1 as /devices/virtual/input/input99 [ 426.178580][T14014] input: failed to attach handler leds to device input99, error: -6 14:14:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:14:58 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:58 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x26101) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000) 14:14:58 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000040)='autofs\x00', 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x90, 0x4, 0x80, "81325c465404d946e0366801067b365f", "ba34dfa342c10a46a613dca9736e5c1005fd6daf85510509eea17535f6ac4c976f85064e11115e2acdb32cad0380d43cfc099fe505b89c593220ebd8d059bddf319b1c53d004c7d0c98afb0d009a424597be3e26498705f2c9165754b7a4a5a7fbb1d99ba40a8b7c09ba97aa888e525493e26333b97f264677f4c1"}, 0x90, 0x2) fstat(r0, &(0x7f0000000900)) r1 = signalfd4(r0, &(0x7f0000000140)={[0x56f3b526]}, 0x8, 0x800) r2 = dup(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x1f, 0x3, 0x6d, 0x5}, {0xfe00, 0x81, 0x1, 0xf077}, {0x40, 0x5, 0x58}, {0x8a, 0x0, 0x9, 0x3}, {0x1, 0x10, 0x3, 0xffff3dc7}]}) fstat(r4, &(0x7f0000000900)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth1_vlan\x00', 0x8000}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r5, &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x5) [ 426.735952][T14035] input: syz1 as /devices/virtual/input/input100 [ 426.742738][T14035] input: failed to attach handler leds to device input100, error: -6 14:14:58 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:14:58 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:59 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 427.253224][T14054] input: syz1 as /devices/virtual/input/input101 [ 427.259945][T14054] input: failed to attach handler leds to device input101, error: -6 14:14:59 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:14:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8001) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:14:59 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:14:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 427.915852][T14070] input: syz1 as /devices/virtual/input/input102 [ 427.922811][T14070] input: failed to attach handler leds to device input102, error: -6 14:15:00 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:00 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 428.555579][T14088] input: syz1 as /devices/virtual/input/input103 [ 428.562406][T14088] input: failed to attach handler leds to device input103, error: -6 14:15:00 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:00 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 429.065811][T14103] input: syz1 as /devices/virtual/input/input104 [ 429.072673][T14103] input: failed to attach handler leds to device input104, error: -6 14:15:01 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:01 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000) [ 429.589927][T14116] input: syz1 as /devices/virtual/input/input105 [ 429.597051][T14116] input: failed to attach handler leds to device input105, error: -6 14:15:01 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:01 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000) 14:15:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:01 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 430.138810][T14135] input: syz1 as /devices/virtual/input/input106 [ 430.145630][T14135] input: failed to attach handler leds to device input106, error: -6 14:15:02 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:02 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000) 14:15:02 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 430.654625][T14155] input: syz1 as /devices/virtual/input/input107 [ 430.661284][T14155] input: failed to attach handler leds to device input107, error: -6 14:15:02 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:02 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:02 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r0, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) [ 431.204209][T14169] input: syz1 as /devices/virtual/input/input108 [ 431.210911][T14169] input: failed to attach handler leds to device input108, error: -6 14:15:03 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r0, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) 14:15:03 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:03 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:03 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r0, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) [ 431.723963][T14187] input: syz1 as /devices/virtual/input/input109 [ 431.730755][T14187] input: failed to attach handler leds to device input109, error: -6 14:15:03 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:03 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:03 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e00000000"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 432.180098][ C0] sd 0:0:1:0: [sg0] tag#949 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 432.190772][ C0] sd 0:0:1:0: [sg0] tag#949 CDB: Test Unit Ready [ 432.198576][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.208337][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.218221][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.228067][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.237881][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.247721][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.257491][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.268148][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.278095][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.287868][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.297693][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.307563][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.317441][ C0] sd 0:0:1:0: [sg0] tag#949 CDB[c0]: 00 00 00 00 00 00 00 00 [ 432.350984][T14206] input: syz1 as /devices/virtual/input/input110 [ 432.358040][T14206] input: failed to attach handler leds to device input110, error: -6 14:15:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:04 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e00000000"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 432.622220][ C0] sd 0:0:1:0: [sg0] tag#902 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 432.632880][ C0] sd 0:0:1:0: [sg0] tag#902 CDB: Test Unit Ready [ 432.639411][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.649334][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.659102][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.668919][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.678680][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.688519][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.698330][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.708095][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.717881][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.727672][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.737438][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.747226][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.757012][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:04 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 432.785095][T14218] input: syz1 as /devices/virtual/input/input111 [ 432.791660][T14218] input: failed to attach handler leds to device input111, error: -6 14:15:04 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e00000000"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:04 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 433.173143][ C0] sd 0:0:1:0: [sg0] tag#917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 433.183859][ C0] sd 0:0:1:0: [sg0] tag#917 CDB: Test Unit Ready [ 433.190565][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.200454][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.210294][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.222532][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.232324][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.241325][T14231] input: syz1 as /devices/virtual/input/input112 [ 433.242080][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.242191][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.242309][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.242407][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.248788][T14231] input: failed to attach handler leds to device input112, error: -6 [ 433.258598][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.305359][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.315889][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.325734][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:05 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:05 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7e"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:05 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 433.802443][T14242] input: syz1 as /devices/virtual/input/input113 [ 433.809161][T14242] input: failed to attach handler leds to device input113, error: -6 [ 433.825844][ C0] sd 0:0:1:0: [sg0] tag#931 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 433.836407][ C0] sd 0:0:1:0: [sg0] tag#931 CDB: Test Unit Ready [ 433.843169][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.853021][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.862867][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.872718][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.882576][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.892412][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.903160][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.912974][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.922798][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.932711][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.942526][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.952338][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 433.962158][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:06 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7e"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:06 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 434.402146][ C0] sd 0:0:1:0: [sg0] tag#948 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 434.412780][ C0] sd 0:0:1:0: [sg0] tag#948 CDB: Test Unit Ready [ 434.419314][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.429925][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.439774][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.449671][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.459485][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.469312][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.479147][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.489120][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.498978][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.508835][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.518662][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.528507][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 434.538359][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[c0]: 00 00 00 00 00 00 00 00 [ 434.568239][T14256] input: syz1 as /devices/virtual/input/input114 [ 434.575113][T14256] input: failed to attach handler leds to device input114, error: -6 14:15:06 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:06 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7e"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 434.802066][T14270] input: syz1 as /devices/virtual/input/input115 [ 434.808797][T14270] input: failed to attach handler leds to device input115, error: -6 14:15:06 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:06 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e600"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 435.003720][ C0] sd 0:0:1:0: [sg0] tag#904 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 435.014279][ C0] sd 0:0:1:0: [sg0] tag#904 CDB: Test Unit Ready [ 435.020806][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.030643][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.040490][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.050314][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.060172][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.070070][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.082198][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.092281][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.102093][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.111743][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.121609][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.131666][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.141576][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:07 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 435.216545][T14284] input: syz1 as /devices/virtual/input/input116 [ 435.223446][T14284] input: failed to attach handler leds to device input116, error: -6 [ 435.283322][ C0] sd 0:0:1:0: [sg0] tag#920 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 435.293932][ C0] sd 0:0:1:0: [sg0] tag#920 CDB: Test Unit Ready [ 435.300485][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.310326][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.320166][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:07 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 435.329984][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.341012][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.350792][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.360701][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.371796][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.381619][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.391410][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.401191][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.410964][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.420759][ C0] sd 0:0:1:0: [sg0] tag#920 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:07 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e600"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:07 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 435.679375][T14300] input: syz1 as /devices/virtual/input/input117 [ 435.686209][T14300] input: failed to attach handler leds to device input117, error: -6 14:15:07 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:07 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e600"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:07 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 435.957266][T14312] input: syz1 as /devices/virtual/input/input118 [ 435.964061][T14312] input: failed to attach handler leds to device input118, error: -6 [ 436.010306][ C0] sd 0:0:1:0: [sg0] tag#935 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 436.020864][ C0] sd 0:0:1:0: [sg0] tag#935 CDB: Test Unit Ready [ 436.027535][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.037307][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.047098][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.056875][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.066651][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.076431][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.086322][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.096097][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.105834][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.115608][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.126085][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.135863][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.145634][ C0] sd 0:0:1:0: [sg0] tag#935 CDB[c0]: 00 00 00 00 00 00 00 00 [ 436.153474][ C0] sd 0:0:1:0: [sg0] tag#896 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 436.164362][ C0] sd 0:0:1:0: [sg0] tag#896 CDB: Test Unit Ready [ 436.170910][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.180700][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.190482][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.200528][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.210325][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.220184][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.229980][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.239746][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 436.252755][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.262520][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.272983][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.282754][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.292979][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:08 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e600"/185], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 436.577716][ C0] sd 0:0:1:0: [sg0] tag#912 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 436.588340][ C0] sd 0:0:1:0: [sg0] tag#912 CDB: Test Unit Ready [ 436.595013][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.604771][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.614547][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.624363][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.634109][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.643861][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.646129][T14332] input: syz1 as /devices/virtual/input/input119 [ 436.653623][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 436.670062][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.679820][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.689590][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.699444][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.709302][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.719532][ C0] sd 0:0:1:0: [sg0] tag#912 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:08 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e600"/185], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 437.094498][T14347] input: syz1 as /devices/virtual/input/input121 [ 437.103589][T14347] input: failed to attach handler leds to device input121, error: -6 14:15:09 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:09 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:09 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e600"/185], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 437.559238][T14363] input: syz1 as /devices/virtual/input/input122 [ 437.566349][T14363] input: failed to attach handler leds to device input122, error: -6 [ 437.591331][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 437.591467][ C0] sd 0:0:1:0: [sg0] tag#941 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 437.609222][ C0] sd 0:0:1:0: [sg0] tag#941 CDB: Test Unit Ready [ 437.616193][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.626037][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.635999][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.646307][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.656172][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.666086][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.675966][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.685931][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.695885][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:09 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 437.705768][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.716618][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.727193][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.736960][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:09 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:09 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 438.155613][ C1] sd 0:0:1:0: [sg0] tag#958 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 438.166379][ C1] sd 0:0:1:0: [sg0] tag#958 CDB: Test Unit Ready [ 438.173142][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.184142][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.194362][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.204246][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.214006][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.223764][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.233508][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.243488][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.253367][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.263186][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.272959][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.282851][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.292604][ C1] sd 0:0:1:0: [sg0] tag#958 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:10 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 438.332154][T14381] input: syz1 as /devices/virtual/input/input123 [ 438.339052][T14381] input: failed to attach handler leds to device input123, error: -6 14:15:10 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(0x0, 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:10 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:10 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:10 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:10 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(0x0, 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:11 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:11 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 439.380242][ C1] sd 0:0:1:0: [sg0] tag#908 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 439.390847][ C1] sd 0:0:1:0: [sg0] tag#908 CDB: Test Unit Ready [ 439.397600][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.407402][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.417207][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.427096][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.436889][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.445548][T14412] input: syz1 as /devices/virtual/input/input124 [ 439.446649][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.453254][T14412] input: failed to attach handler leds to device input124, error: -6 [ 439.462561][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:11 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(0x0, 0x141042, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 439.462662][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.490392][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.500132][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.509955][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.519726][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 439.529451][ C1] sd 0:0:1:0: [sg0] tag#908 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:11 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:11 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:11 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:12 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:12 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:12 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 440.287288][ C1] sd 0:0:1:0: [sg0] tag#926 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 440.298385][ C1] sd 0:0:1:0: [sg0] tag#926 CDB: Test Unit Ready [ 440.305126][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.315422][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.325182][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.335011][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.344776][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.355214][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.365216][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.375067][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.384822][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.395450][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.405554][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.415310][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.425048][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[c0]: 00 00 00 00 00 00 00 00 [ 440.450482][T14438] input: syz1 as /devices/virtual/input/input125 [ 440.457212][T14438] input: failed to attach handler leds to device input125, error: -6 14:15:12 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:12 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d601"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:12 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:12 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x101) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 440.835001][ C1] sd 0:0:1:0: [sg0] tag#944 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 440.845599][ C1] sd 0:0:1:0: [sg0] tag#944 CDB: Test Unit Ready [ 440.852289][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.862098][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.871918][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.881697][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.891506][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.901384][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.911323][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.921160][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:12 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 440.932183][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.942366][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.952180][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.962071][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 440.972044][ C1] sd 0:0:1:0: [sg0] tag#944 CDB[c0]: 00 00 00 00 00 00 00 00 [ 441.004369][T14453] input: syz1 as /devices/virtual/input/input126 [ 441.011035][T14453] input: failed to attach handler leds to device input126, error: -6 14:15:12 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:13 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d601"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:13 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 441.457815][ C1] sd 0:0:1:0: [sg0] tag#898 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 441.468403][ C1] sd 0:0:1:0: [sg0] tag#898 CDB: Test Unit Ready [ 441.475283][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.485093][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.495544][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.505343][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.515095][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.524933][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.534860][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.544604][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.554382][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.564140][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.574324][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.584086][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.593810][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:13 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 441.654266][T14471] input: syz1 as /devices/virtual/input/input127 [ 441.661383][T14471] input: failed to attach handler leds to device input127, error: -6 14:15:13 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:13 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:14 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d601"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 442.432097][ C1] sd 0:0:1:0: [sg0] tag#915 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 442.442854][ C1] sd 0:0:1:0: [sg0] tag#915 CDB: Test Unit Ready [ 442.449479][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.459584][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.469440][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.479278][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.489645][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.499404][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.509238][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.518997][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:14 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 442.528758][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.538536][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.548308][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.558059][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.567792][ C1] sd 0:0:1:0: [sg0] tag#915 CDB[c0]: 00 00 00 00 00 00 00 00 [ 442.603062][T14491] input: syz1 as /devices/virtual/input/input128 [ 442.609697][T14491] input: failed to attach handler leds to device input128, error: -6 14:15:14 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:14 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:14 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000) [ 443.127747][ C0] sd 0:0:1:0: [sg0] tag#930 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 443.138460][ C0] sd 0:0:1:0: [sg0] tag#930 CDB: Test Unit Ready [ 443.145220][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.155142][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.165064][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.174888][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.184747][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.191605][T14507] input: syz1 as /devices/virtual/input/input129 [ 443.194638][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.194744][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.201125][T14507] input: failed to attach handler leds to device input129, error: -6 [ 443.210758][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.238233][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.248672][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.258522][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.268364][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:15 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:15 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 443.278161][ C0] sd 0:0:1:0: [sg0] tag#930 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:15 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:15 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:15 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000) [ 443.854182][ C1] sd 0:0:1:0: [sg0] tag#947 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 443.864800][ C1] sd 0:0:1:0: [sg0] tag#947 CDB: Test Unit Ready [ 443.871357][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.881208][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.891006][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.900839][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.910669][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.920503][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.930320][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.940102][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.949918][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.960416][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.970211][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.979991][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.989776][ C1] sd 0:0:1:0: [sg0] tag#947 CDB[c0]: 00 00 00 00 00 00 00 00 [ 444.025068][T14528] input: syz1 as /devices/virtual/input/input130 [ 444.031756][T14528] input: failed to attach handler leds to device input130, error: -6 14:15:16 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:16 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:16 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:16 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000000) [ 444.708514][ C1] sd 0:0:1:0: [sg0] tag#898 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 444.719420][ C1] sd 0:0:1:0: [sg0] tag#898 CDB: Test Unit Ready [ 444.726211][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.736126][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.745958][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.755774][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.765549][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.775336][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.785104][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.794873][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.804633][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.814402][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.824379][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.834366][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.844121][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[c0]: 00 00 00 00 00 00 00 00 [ 444.876547][T14548] input: syz1 as /devices/virtual/input/input131 [ 444.883520][T14548] input: failed to attach handler leds to device input131, error: -6 14:15:16 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:17 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:17 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:17 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 445.350405][ C0] sd 0:0:1:0: [sg0] tag#917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 445.361720][ C0] sd 0:0:1:0: [sg0] tag#917 CDB: Test Unit Ready [ 445.369472][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.379318][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.389165][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.399759][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.409544][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.419317][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.429091][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.439102][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.448869][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.458656][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.468435][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.478310][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.488073][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[c0]: 00 00 00 00 00 00 00 00 [ 445.518048][T14565] input: syz1 as /devices/virtual/input/input132 [ 445.524803][T14565] input: failed to attach handler leds to device input132, error: -6 14:15:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:17 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:17 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:17 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 445.910953][ C0] sd 0:0:1:0: [sg0] tag#931 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 445.921660][ C0] sd 0:0:1:0: [sg0] tag#931 CDB: Test Unit Ready [ 445.928415][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.938395][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.948179][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.957991][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.967773][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.977563][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.987349][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.997141][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.006911][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.016683][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.026442][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.036230][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.045992][ C0] sd 0:0:1:0: [sg0] tag#931 CDB[c0]: 00 00 00 00 00 00 00 00 [ 446.071407][T14577] input: syz1 as /devices/virtual/input/input133 [ 446.078138][T14577] input: failed to attach handler leds to device input133, error: -6 14:15:18 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:18 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 446.377355][ C0] sd 0:0:1:0: [sg0] tag#948 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 446.388042][ C0] sd 0:0:1:0: [sg0] tag#948 CDB: Test Unit Ready [ 446.394789][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.405338][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.415134][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.424981][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.434755][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.444581][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.454370][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.464146][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:18 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 446.473902][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.483756][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.493524][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.503310][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 446.513050][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[c0]: 00 00 00 00 00 00 00 00 [ 446.567801][T14590] input: syz1 as /devices/virtual/input/input134 [ 446.574754][T14590] input: failed to attach handler leds to device input134, error: -6 14:15:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:18 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:18 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(0x0, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 447.030443][ C1] sd 0:0:1:0: [sg0] tag#900 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 447.041129][ C1] sd 0:0:1:0: [sg0] tag#900 CDB: Test Unit Ready [ 447.047812][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.057626][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.067450][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.077311][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.087135][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.096922][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.106729][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.116541][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.126358][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.136143][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.145890][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.155655][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.165447][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:19 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(0x0, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) 14:15:19 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:19 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 447.614297][ C0] sd 0:0:1:0: [sg0] tag#916 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 447.624968][ C0] sd 0:0:1:0: [sg0] tag#916 CDB: Test Unit Ready [ 447.631522][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.641405][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.651189][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.661036][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.670807][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.681230][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.691762][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.701686][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.711526][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.721539][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.731602][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.741438][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.751260][ C0] sd 0:0:1:0: [sg0] tag#916 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:19 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:19 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:19 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(0x0, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80000000) [ 448.134634][ C0] sd 0:0:1:0: [sg0] tag#932 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 448.145431][ C0] sd 0:0:1:0: [sg0] tag#932 CDB: Test Unit Ready [ 448.152108][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.161923][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.171668][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.181495][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.191436][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.201254][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.211265][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.221302][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.231212][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.241144][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.252972][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.262826][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.272613][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:20 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:20 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 448.807493][ C1] sd 0:0:1:0: [sg0] tag#952 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 448.818257][ C1] sd 0:0:1:0: [sg0] tag#952 CDB: Test Unit Ready [ 448.824979][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.834911][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.844709][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.854523][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.864333][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.874221][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.880356][T14641] input: syz1 as /devices/virtual/input/input135 [ 448.884081][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.900105][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.909907][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.919706][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.929516][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.939327][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.949109][ C1] sd 0:0:1:0: [sg0] tag#952 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:21 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) 14:15:21 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:21 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 449.506567][ C0] sd 0:0:1:0: [sg0] tag#904 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 449.517256][ C0] sd 0:0:1:0: [sg0] tag#904 CDB: Test Unit Ready [ 449.523955][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.533727][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.543496][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.553760][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.563711][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.573485][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.583356][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.593127][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.602899][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.612648][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.622421][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.632222][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.641977][ C0] sd 0:0:1:0: [sg0] tag#904 CDB[c0]: 00 00 00 00 00 00 00 00 [ 449.665167][T14658] input: syz1 as /devices/virtual/input/input136 14:15:21 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) 14:15:21 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:21 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 450.090871][ C0] sd 0:0:1:0: [sg0] tag#922 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 450.102503][ C0] sd 0:0:1:0: [sg0] tag#922 CDB: Test Unit Ready [ 450.109047][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.119488][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.129327][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.139099][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.148882][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.158645][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.166351][T14673] input: syz1 as /devices/virtual/input/input137 [ 450.168367][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.189359][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.199147][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.208906][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.219178][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.228938][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.239488][ C0] sd 0:0:1:0: [sg0] tag#922 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:22 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) 14:15:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:22 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 450.729326][T14689] input: syz1 as /devices/virtual/input/input138 14:15:22 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:22 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) [ 450.833735][ C0] sd 0:0:1:0: [sg0] tag#943 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 450.844353][ C0] sd 0:0:1:0: [sg0] tag#943 CDB: Test Unit Ready [ 450.850970][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.860915][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.870845][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.880700][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.890635][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.900485][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.910336][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.920209][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.930130][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.939968][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.949815][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.959657][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.969489][ C0] sd 0:0:1:0: [sg0] tag#943 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:23 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:23 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) 14:15:23 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 451.456514][ C1] sd 0:0:1:0: [sg0] tag#901 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 451.468450][ C1] sd 0:0:1:0: [sg0] tag#901 CDB: Test Unit Ready [ 451.475434][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.485176][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.494906][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) fstat(0xffffffffffffffff, &(0x7f0000000900)) r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x5, 0x480203) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x800000000000401) r4 = accept4(r3, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={r6, 0x7f}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e22, 0x3cf5, @ipv4={[], [], @loopback}, 0xff}}, 0x1, 0x9, 0xfffffffc, 0x1ff, 0x85, 0xe8eb, 0x5}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r7 = socket(0x26, 0x3, 0xc9) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) r9 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r9, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 451.504743][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.514560][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.524291][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.534020][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.543758][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 451.553515][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.563237][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.572967][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.582804][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.592545][ C1] sd 0:0:1:0: [sg0] tag#901 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:23 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) 14:15:23 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:23 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) waitid(0x1, r3, &(0x7f0000000080), 0x8, &(0x7f0000000100)) [ 452.269292][ C1] sd 0:0:1:0: [sg0] tag#922 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 452.279929][ C1] sd 0:0:1:0: [sg0] tag#922 CDB: Test Unit Ready [ 452.286651][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.296408][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.306180][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.315923][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.325663][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.335398][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.345127][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.354896][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.364627][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.375463][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.385306][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.395165][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.404915][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:24 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x0) 14:15:24 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:24 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 452.837036][ C0] sd 0:0:1:0: [sg0] tag#939 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 452.847606][ C0] sd 0:0:1:0: [sg0] tag#939 CDB: Test Unit Ready [ 452.854330][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.864163][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.874049][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.883865][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.893648][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.903445][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.913271][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.923047][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.923192][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.942505][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.952304][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.962162][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 452.971928][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x0) 14:15:25 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:25 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 453.809355][ C0] sd 0:0:1:0: [sg0] tag#905 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 453.819924][ C0] sd 0:0:1:0: [sg0] tag#905 CDB: Test Unit Ready [ 453.826591][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.836368][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.846177][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.855965][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.865751][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.875538][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.885319][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.895114][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:25 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:25 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x7, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4f, 0x7, 0x1, 0x0, "67dc606658194b544ce0f010b4c6a1104e1bbe503da2a2ba80c82d09f6a1f83ede171fa64a8172f3a79777f90a0b33406e3421c6b9ca8749f3304e186abafef0daed702ebe6b8228ce32f3"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x4008004) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x10000) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x0, &(0x7f0000000080)=0x8, &(0x7f0000001ac0)=0x2) [ 453.904891][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.914654][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.924429][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.934207][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.943986][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001540)='/dev/adsp1\x00', 0xe8901, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x0) [ 454.267054][ C0] sd 0:0:1:0: [sg0] tag#919 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 454.277691][ C0] sd 0:0:1:0: [sg0] tag#919 CDB: Test Unit Ready [ 454.284428][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.294283][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.304145][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.313982][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.323851][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.333704][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.343540][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.353365][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:26 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 454.363207][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.373051][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.382918][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.392929][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.403508][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[c0]: 00 00 00 00 00 00 00 00 [ 454.635332][ C1] sd 0:0:1:0: [sg0] tag#936 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 454.646047][ C1] sd 0:0:1:0: [sg0] tag#936 CDB: Test Unit Ready [ 454.652781][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.662575][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.672680][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.682471][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.692290][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.702085][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.711742][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.721544][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.731331][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.741170][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.750972][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.760789][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.770619][ C1] sd 0:0:1:0: [sg0] tag#936 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:26 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:26 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 455.248450][ C1] sd 0:0:1:0: [sg0] tag#951 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 455.259066][ C1] sd 0:0:1:0: [sg0] tag#951 CDB: Test Unit Ready [ 455.265741][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.276216][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.286039][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.295845][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.296006][T14789] input: syz1 as /devices/virtual/input/input145 [ 455.305590][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.305697][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.331815][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.342007][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.351715][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.361547][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.371340][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.381232][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.391017][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:27 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 14:15:27 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:27 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:27 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r2, r3}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000180)={'sm3\x00'}}) [ 456.103876][ C0] sd 0:0:1:0: [sg0] tag#907 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 456.114497][ C0] sd 0:0:1:0: [sg0] tag#907 CDB: Test Unit Ready [ 456.121026][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.130862][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.140638][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.150452][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.160244][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.170031][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.180074][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.189933][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.199761][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.209913][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.219696][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.229461][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.239218][ C0] sd 0:0:1:0: [sg0] tag#907 CDB[c0]: 00 00 00 00 00 00 00 00 [ 456.298111][T14810] input: syz1 as /devices/virtual/input/input146 14:15:28 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:28 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) io_destroy(r1) pipe2(&(0x7f0000000100), 0x0) 14:15:28 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 456.649399][ C0] sd 0:0:1:0: [sg0] tag#921 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 456.660016][ C0] sd 0:0:1:0: [sg0] tag#921 CDB: Test Unit Ready [ 456.666683][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.676457][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.686283][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.696098][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.705902][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.713037][T14829] input: syz1 as /devices/virtual/input/input147 [ 456.715672][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.731566][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.741632][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.751448][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.761308][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.771144][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.780936][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 456.790720][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:28 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 457.190514][T14844] input: syz1 as /devices/virtual/input/input148 14:15:29 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:29 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 457.498287][ C0] sd 0:0:1:0: [sg0] tag#939 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 457.508897][ C0] sd 0:0:1:0: [sg0] tag#939 CDB: Test Unit Ready [ 457.515629][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.525396][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.535160][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.544925][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.554709][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.564492][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.574788][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.584527][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 457.594344][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.604101][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.613870][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.623669][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.633442][ C0] sd 0:0:1:0: [sg0] tag#939 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:29 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) [ 457.689298][T14856] input: syz1 as /devices/virtual/input/input149 14:15:29 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x400000000000085, 0x0) 14:15:29 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 458.071712][ C1] sd 0:0:1:0: [sg0] tag#903 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 458.082386][ C1] sd 0:0:1:0: [sg0] tag#903 CDB: Test Unit Ready [ 458.088926][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.098762][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.108569][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.118351][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.128126][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.136516][T14874] input: syz1 as /devices/virtual/input/input150 [ 458.137855][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.153871][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.163650][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.173574][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.183070][ C0] sd 0:0:1:0: [sg0] tag#951 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 458.183350][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.193685][ C0] sd 0:0:1:0: [sg0] tag#951 CDB: Test Unit Ready [ 458.203306][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.209708][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.219478][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.229170][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.238695][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[c0]: 00 00 00 00 00 00 00 00 [ 458.248289][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.265513][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.275284][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.285040][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.294785][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.304549][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:30 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, 0x0, 0x0, 0x0) [ 458.314325][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.324085][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.333903][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.343679][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.353458][ C0] sd 0:0:1:0: [sg0] tag#951 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:30 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, 0x0, 0x0, 0x0) 14:15:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0x0, 0x0, [0x100000000000000]}) 14:15:31 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, 0x0, 0x0, 0x0) 14:15:31 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 459.409322][ C0] sd 0:0:1:0: [sg0] tag#917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 459.420080][ C0] sd 0:0:1:0: [sg0] tag#917 CDB: Test Unit Ready [ 459.426781][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.436575][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.446365][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.456201][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.465972][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.475753][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.485639][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.495438][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0x0, 0x0, [0x100000000000000]}) 14:15:31 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280), 0x0, 0x0) [ 459.505227][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.515024][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.524881][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.534688][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 459.544535][ C0] sd 0:0:1:0: [sg0] tag#917 CDB[c0]: 00 00 00 00 00 00 00 00 [ 459.574723][T14898] input: syz1 as /devices/virtual/input/input151 14:15:31 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:31 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280), 0x0, 0x0) 14:15:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x3, 0x0, 0x0, [0x100000000000000]}) [ 459.980040][T14913] input: syz1 as /devices/virtual/input/input152 14:15:31 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000280), 0x0, 0x0) [ 460.101124][ C0] sd 0:0:1:0: [sg0] tag#934 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 460.111697][ C0] sd 0:0:1:0: [sg0] tag#934 CDB: Test Unit Ready [ 460.118374][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.128239][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.138051][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.147851][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.157659][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.167481][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.177338][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.187153][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.196945][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.206746][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.216570][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.226547][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.236360][ C0] sd 0:0:1:0: [sg0] tag#934 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:32 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:32 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) [ 460.630076][T14939] input: syz1 as /devices/virtual/input/input153 14:15:32 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x51) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 14:15:32 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 460.834947][ C0] sd 0:0:1:0: [sg0] tag#952 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 460.845488][ C0] sd 0:0:1:0: [sg0] tag#952 CDB: Test Unit Ready [ 460.852758][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.862583][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.872423][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.882244][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.892104][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.902016][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.911698][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.921526][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.931355][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.941192][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.951037][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.960893][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.970733][ C0] sd 0:0:1:0: [sg0] tag#952 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:32 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) 14:15:33 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:33 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc04c5349, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 14:15:33 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) [ 461.325811][ C0] sd 0:0:1:0: [sg0] tag#911 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 461.336440][ C0] sd 0:0:1:0: [sg0] tag#911 CDB: Test Unit Ready [ 461.343228][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.353021][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.362967][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.372813][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.382666][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.392499][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.402353][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.412776][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.422615][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.432457][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.442363][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.452194][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.461996][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[c0]: 00 00 00 00 00 00 00 00 [ 461.503677][ C1] sd 0:0:1:0: [sg0] tag#929 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 461.514301][ C1] sd 0:0:1:0: [sg0] tag#929 CDB: Test Unit Ready [ 461.520824][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.531405][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.541205][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.551061][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.560888][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.570677][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.580410][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.590196][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.600193][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.609972][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.619762][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.629592][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.639366][ C1] sd 0:0:1:0: [sg0] tag#929 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r1 = syz_open_procfs(0x0, 0x0) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x10000, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000200)) ptrace$getsig(0x4202, 0x0, 0x6ca, &(0x7f0000000180)) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000075, 0x0) 14:15:33 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) [ 461.908676][T14982] input: syz1 as /devices/virtual/input/input156 [ 461.981005][T14988] input: syz1 as /devices/virtual/input/input157 14:15:33 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) 14:15:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x10006095}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x4044001) 14:15:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0xfc}}) 14:15:34 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0xfc}}) 14:15:34 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) 14:15:34 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 462.839734][ C1] sd 0:0:1:0: [sg0] tag#946 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 462.850387][ C1] sd 0:0:1:0: [sg0] tag#946 CDB: Test Unit Ready [ 462.857169][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.867036][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.877071][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.886858][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.896669][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.906467][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.916277][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.926084][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 462.935907][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.945722][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.956117][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.965899][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.975705][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:34 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 14:15:34 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) 14:15:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0xe, &(0x7f0000000040)=0x1, &(0x7f0000001ac0)=0xffffffffffffffff) 14:15:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)='#\x00'}, 0x30) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) migrate_pages(r3, 0x6, &(0x7f0000000100)=0x240, &(0x7f0000001ac0)=0xffffffffffffffff) 14:15:35 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 0x7}}) 14:15:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) 14:15:35 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xe}}) 14:15:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) 14:15:35 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x5, 0x480203) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x800000000000401) r5 = accept4(r4, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000001c0)={r7}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000180)={r7, 0x7f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r7, 0x20, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r8, 0x8, 0xe4, "c1d71ec7a1acbe9bd9c0a8e4daa1f4d4d093c47395de5540039476e2b3f4fea953094f1990178fd8c992a0d85321360d286f57982d96655ae5cbc90021f17463f350e6d781767d90bce7c77664b925974fcc0f33f323df89b65195105a2e569a8372f4bdef9e09085e4fd6904f039928fd7e8abcbad8fb791c8da1a352f39f8795e1eedbbf4f4ad6b42794678b87ee778ef22a00bf1438ee4fe05d48613ad8daee31943b2b067cd5dc599cba30fc06e0b94c210437ff99d135289a86833e4f85f0d7c7e2b2b78a0ca09581439b8ef9d67de233787a3ae1483a125df4a86f87d683a009c6"}, 0xec) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r9 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r9, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:15:35 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 464.222955][ C1] sd 0:0:1:0: [sg0] tag#905 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 464.233561][ C1] sd 0:0:1:0: [sg0] tag#905 CDB: Test Unit Ready [ 464.240093][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.249953][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.259823][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.269658][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.279420][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.289199][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.298980][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.308765][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.318566][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.328359][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.338158][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.347931][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.357775][ C1] sd 0:0:1:0: [sg0] tag#905 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 464.392196][T15059] input: syz1 as /devices/virtual/input/input159 [ 464.456331][T15066] device vxlan0 entered promiscuous mode 14:15:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140a, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x408c0) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:15:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) 14:15:36 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:36 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) [ 465.205487][ C0] sd 0:0:1:0: [sg0] tag#927 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 465.216069][ C0] sd 0:0:1:0: [sg0] tag#927 CDB: Test Unit Ready [ 465.223022][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.232829][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.242662][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.252479][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.262212][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.271947][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.281609][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.291361][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.301099][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.307862][T15091] input: syz1 as /devices/virtual/input/input160 [ 465.310816][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.326835][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.336586][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.346321][ C0] sd 0:0:1:0: [sg0] tag#927 CDB[c0]: 00 00 00 00 00 00 00 00 [ 465.398617][T15089] device vxlan0 entered promiscuous mode 14:15:37 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) 14:15:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:37 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 465.861562][ C0] sd 0:0:1:0: [sg0] tag#954 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 465.872291][ C0] sd 0:0:1:0: [sg0] tag#954 CDB: Test Unit Ready [ 465.878829][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.888700][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.898466][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6000000024000b0f000000658968bac5611e4c62abfea095a0584c8f087af1000000", @ANYRES64, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003000020000000000000000fb9b0cb60000000000000000000000000014000600000000d70c7e0000000000000000000000000081429ca972cf153f99654d8b594e393801f884b1874c61aa1db21b4cf98de5a35feb0b9fc234bda5a3fa808496a9bab2c530d0977d81598a9da466a051d7bab5c606ae4087ed64a4340b5e7265a4b0215728704b1355fb08141c784d752495cbde5cbe03314cc3396fedd71572319461133df389812f149dadb354b3d7e0165a48134057df9c086bfa9e55ea19e918ef"], 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', r4}) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x44af, 0x8}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='limits\x00') fstat(r7, &(0x7f0000000900)) fstat(0xffffffffffffffff, &(0x7f0000000900)) bind$isdn_base(r6, &(0x7f0000000580)={0x22, 0x8, 0x3f, 0x80, 0x81}, 0x6) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(0xffffffffffffffff, &(0x7f00000006c0)) sendmsg$inet6(r8, &(0x7f0000000540)={&(0x7f0000000200)={0xa, 0x4e21, 0x8, @empty, 0x1000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000240)="3a621e7c4693945fae669beacb66170295a9f5847c110194785be5dd170b0aef369c6317e9e534d688addfaeb94e15085604f65f39ef958cb1833d123c", 0x3d}, {&(0x7f0000000280)="082043015dbf237d95c29aaccbc9c1b1c6c3ff828427f6b82299d694158d9d05ba09cf4e1dfc3fd6f95e433203c7419ba29dcf54592353b1d917de124cff28b3371e45501a6aa0ac5bc614a0065d56fed2f6e101638d69ba1f53e30030436467a572147f3f83e695e71b2276e4547d1867c0457b88015c8b360eb73764b8f9c2f75d3329279635b0deec7de6cb922b7a90dc2b15802c73e10040893b4bd71b6ea03711b49e7646f6ef6a7275f3eb820b437b52486506e2d2207aa28da386c19b246772", 0xc3}, {&(0x7f0000000380)="8871f3e15676bb4a7cc8b68a6cb04af8d0d0e5867f1261c8b19882bc6057", 0x1e}, {&(0x7f0000000800)="4b87291cc3c66175f88f5ede64d3f9bed9166f68b0ea38447fedaa571b5fa9df5b56c6d96ebf41bd19b4fd0c07002b9e640382990942a19a10f795d6115a07ee30ebce994d6c058999e3f4d54727f023f0e1c92ab98750742efa2fb49be5bd9689d7537236fa138e7df913febe70617c9171ba6a36cfb1c1ead0a736098c8d8d6b3c5e3671b8981ef52466ec64bea4c9dbd3e69ce787eac44939b1be61efcd0c03bc83368166e99af65073b64bbd4a5c2a08616436457d643abba897c01a1421701b52a09573f44fd903", 0xca}], 0x4, &(0x7f00000004c0)=ANY=[], 0x70}, 0x8000) [ 465.908312][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.918281][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.928047][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.937810][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.947558][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:37 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) [ 465.957292][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.967033][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.976776][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.986725][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.996462][ C0] sd 0:0:1:0: [sg0] tag#954 CDB[c0]: 00 00 00 00 00 00 00 00 [ 466.038204][T15112] input: syz1 as /devices/virtual/input/input161 14:15:38 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) [ 466.612114][T15122] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 14:15:38 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 14:15:38 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) 14:15:38 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14}]}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@ipv6_newaddr={0xb0, 0x14, 0x10, 0x70bd2d, 0x25dfdbfe, {0xa, 0x1, 0x82, 0xc8, r4}, [@IFA_FLAGS={0x8, 0x8, 0x105}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7fff, 0xfffff654, 0x9385}}, @IFA_FLAGS={0x8, 0x8, 0x102}, @IFA_FLAGS={0x8, 0x8, 0x23}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x1, 0x59, 0x1}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x292}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4410}, 0x44091) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x610080, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000100)={0x9, [[0x2, 0x6, 0x2, 0xfed, 0xb7, 0x2, 0x3, 0x4], [0x6, 0x81, 0x8, 0xffff0000, 0x2, 0x6, 0x80, 0x7], [0x0, 0x8, 0x9, 0x0, 0x5, 0x8, 0x1ff, 0x8]], [], [{0xfffff800, 0x400, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x9, 0x0, 0x0, 0x0, 0x1}, {0xca99, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x20, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x7f, 0x5, 0x1, 0x1}, {0x8, 0xf1b5}, {0x46c, 0x7, 0x1, 0x0, 0x1}, {0x101, 0xfffffffd, 0x1, 0x1, 0x0, 0x1}, {0x10000, 0xfffffffd, 0x1, 0x0, 0x1, 0x1}, {0x40, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x1}, {0x80000000, 0x6409, 0x0, 0x1, 0x1, 0x1}], [], 0xfffffff7}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r7, &(0x7f0000000900)) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000040)=0x4c93991a, 0x4) r8 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r8, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 466.776960][T15125] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 14:15:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 466.918077][ C0] sd 0:0:1:0: [sg0] tag#913 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 466.928655][ C0] sd 0:0:1:0: [sg0] tag#913 CDB: Test Unit Ready [ 466.935356][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.945112][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.954881][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.964672][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.974461][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.979666][T15140] input: syz1 as /devices/virtual/input/input162 [ 466.984218][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.984326][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.984454][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.019812][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.029590][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.039367][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.049142][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.059171][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[c0]: 00 00 00 00 00 00 00 00 [ 467.149140][T15151] device vxlan0 entered promiscuous mode 14:15:39 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) 14:15:39 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:39 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) [ 467.697599][ C1] sd 0:0:1:0: [sg0] tag#935 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 467.708293][ C1] sd 0:0:1:0: [sg0] tag#935 CDB: Test Unit Ready [ 467.715012][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.724830][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.734656][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.744448][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.754232][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.764024][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.773795][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.783584][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.793714][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.803467][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.813605][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.823474][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.833272][ C1] sd 0:0:1:0: [sg0] tag#935 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', {}, 0x3}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14}]}}}]}, 0x60}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000024000b0f3c7cca3100000000b66800000000452db30b07403cb4194a397214b57a5596d2b453782f9c73fba442282ada8e39a76ddedc97c3cee2c6b06425d76cf6d1f3c9a6da33ca10531df5ee4f9ce9ba50455d68239e0cd725b8b59537fdddff9f9390d1961cd4bb581dfc114d5b1719dbb61a25be90dbfffe9f5b71e5f08cc9968a15fa0ada551d812bd0ecdcdcbb8ba4b91a2fcf10eb9ddf9d251c888993c55802d21519db7c", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003000020000000000000000000000000000000000000000000000000014000600"/72], 0x60}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x40}}, 0x42) connect$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$RTC_PIE_OFF(r1, 0x7006) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x80) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:15:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 467.874611][T15167] input: syz1 as /devices/virtual/input/input163 14:15:39 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) 14:15:40 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) 14:15:40 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 14:15:40 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001900)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04f50000", @ANYRES16=r4, @ANYBLOB="02002bbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000229bd7000fbdbdf2502000000050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004801) [ 468.831071][ C1] sd 0:0:1:0: [sg0] tag#951 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 468.841652][ C1] sd 0:0:1:0: [sg0] tag#951 CDB: Test Unit Ready [ 468.848381][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.858130][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.867882][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.877628][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.887375][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.897113][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.900582][T15202] device vxlan0 entered promiscuous mode [ 468.906860][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.906966][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.907069][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.907178][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.907288][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.907399][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 468.907497][ C1] sd 0:0:1:0: [sg0] tag#951 CDB[c0]: 00 00 00 00 00 00 00 00 [ 469.025691][T15199] input: syz1 as /devices/virtual/input/input164 14:15:41 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r0, &(0x7f0000000900)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x280040, 0x0) migrate_pages(r6, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:15:41 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x0, 0x3f000002}) close(r1) 14:15:41 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0xa3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 14:15:41 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 469.755294][ C0] sd 0:0:1:0: [sg0] tag#909 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.766000][ C0] sd 0:0:1:0: [sg0] tag#909 CDB: Test Unit Ready [ 469.772741][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.782522][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.792307][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.802131][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.812013][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.821689][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.831505][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.841346][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.851203][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.861015][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.870824][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.881490][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.891316][ C0] sd 0:0:1:0: [sg0] tag#909 CDB[c0]: 00 00 00 00 00 00 00 00 [ 469.925220][T15237] input: syz1 as /devices/virtual/input/input165 14:15:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xed) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x14) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') readv(r4, &(0x7f0000000580), 0x3c1) ioctl$CAPI_GET_SERIAL(r4, 0xc0044308, &(0x7f0000000040)=0x1f) connect$inet(r0, &(0x7f0000000100), 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 14:15:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:15:42 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x3ff, 0x7fffffff, 0x1, 0x894b}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 470.487357][T15252] input: syz1 as /devices/virtual/input/input166 14:15:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x6, 0x34) getsockopt$netlink(r2, 0x10e, 0x7, &(0x7f0000000040)=""/5, &(0x7f0000000080)=0x5) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x140d, 0x540, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 470.608734][T15256] input: syz1 as /devices/virtual/input/input167 [ 470.637049][ C0] sd 0:0:1:0: [sg0] tag#924 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.647976][ C0] sd 0:0:1:0: [sg0] tag#924 CDB: Test Unit Ready [ 470.654683][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.664500][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.674315][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.676940][T15261] binder: 15257:15261 ioctl c0306201 200000c0 returned -14 [ 470.684170][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.701104][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.702583][T15261] binder: BINDER_SET_CONTEXT_MGR already set [ 470.710997][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.717177][T15261] binder: 15257:15261 ioctl 40046207 0 returned -16 [ 470.726718][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.743085][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.747606][T15272] binder: BINDER_SET_CONTEXT_MGR already set [ 470.752941][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.758974][T15272] binder: 15257:15272 ioctl 40046207 0 returned -16 [ 470.768591][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.784950][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.794750][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.804541][ C0] sd 0:0:1:0: [sg0] tag#924 CDB[c0]: 00 00 00 00 00 00 00 00 [ 470.840590][T15267] input: syz1 as /devices/virtual/input/input168 14:15:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 14:15:42 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 471.319015][ C1] sd 0:0:1:0: [sg0] tag#946 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 471.329756][ C1] sd 0:0:1:0: [sg0] tag#946 CDB: Test Unit Ready [ 471.336450][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.346208][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.355956][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.365760][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.375528][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.385413][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.395171][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.404920][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.414706][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.424503][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.434263][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.441234][T15300] binder: 15298:15300 ioctl c0306201 200000c0 returned -14 [ 471.444001][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 471.444103][ C1] sd 0:0:1:0: [sg0] tag#946 CDB[c0]: 00 00 00 00 00 00 00 00 [ 471.506842][T15296] input: syz1 as /devices/virtual/input/input169 14:15:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:15:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 471.857517][T15311] binder: 15309:15311 ioctl c0306201 200000c0 returned -14 14:15:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:15:44 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 472.780300][ C0] sd 0:0:1:0: [sg0] tag#908 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 472.790870][ C0] sd 0:0:1:0: [sg0] tag#908 CDB: Test Unit Ready [ 472.797577][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.807353][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.817118][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.826854][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.836592][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.846331][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.856174][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.865919][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x4, [], "0ccdcd6160eec7ec31fa1601dccd00e2"}) r2 = clone3(&(0x7f0000001680)={0x60280, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 472.875652][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.885393][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.895123][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.904857][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.914576][ C0] sd 0:0:1:0: [sg0] tag#908 CDB[c0]: 00 00 00 00 00 00 00 00 [ 472.964656][T15329] input: syz1 as /devices/virtual/input/input170 14:15:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x110000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) [ 473.254850][T15323] binder: 15321:15323 ioctl c0306201 200000c0 returned -14 14:15:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0), 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:45 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 474.061442][ C0] sd 0:0:1:0: [sg0] tag#933 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.072037][ C0] sd 0:0:1:0: [sg0] tag#933 CDB: Test Unit Ready [ 474.078577][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.088451][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.098283][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.108096][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.117997][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.122514][T15361] input: syz1 as /devices/virtual/input/input171 [ 474.127766][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.143675][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.153465][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.163269][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.173101][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.183002][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.192825][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.202631][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:46 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x770a, 0x0) 14:15:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 14:15:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:15:46 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0), 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 474.959788][ C0] sd 0:0:1:0: [sg0] tag#957 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.970358][ C0] sd 0:0:1:0: [sg0] tag#957 CDB: Test Unit Ready [ 474.977104][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.986871][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.996896][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.006715][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.016506][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.026268][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.036022][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.045804][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.055580][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.065363][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.075119][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.084894][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.094680][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[c0]: 00 00 00 00 00 00 00 00 [ 475.124849][T15376] input: syz1 as /devices/virtual/input/input172 14:15:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) 14:15:47 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 475.611006][ C0] sd 0:0:1:0: [sg0] tag#914 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 475.621788][ C0] sd 0:0:1:0: [sg0] tag#914 CDB: Test Unit Ready [ 475.628478][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.638228][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.648246][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.658206][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.668469][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.678292][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.688174][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.697987][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.707856][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.717737][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.727553][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.737314][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.747248][ C0] sd 0:0:1:0: [sg0] tag#914 CDB[c0]: 00 00 00 00 00 00 00 00 [ 475.775431][T15399] input: syz1 as /devices/virtual/input/input173 14:15:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) sendmsg$nl_netfilter(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000000080)={0x12a0, 0x14, 0x5, 0x801, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x2}, [@generic="97b71e08df5f7e2878a270245f7bb00b68d33a4f1c18677277016a8f2dbb5f243a91a8b694f1efe7183390692d902d343ec2412f48238a1f06777cd6fb2921c9f2d6f93050eedfb05d06b67f47ad58cd22b0bb5f4f9ae6fbe455bc1c2315d7a9aadcf4b28e00639be5e43035d3e531ae8ac1814a6c6f6267eb30d241e5c34a45824abd85cb8a0d9294d237fba047c2b48f361a9b3bfb4ca4e6c924818e4497d324fbe636188058567fec0ecd158f558ae064b2c413fd2c3187b8f93d9f2f5caeaacd7fa1bf28fb2a65759ed01ebc2562b570b5754c9c436322", @generic="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", @nested={0x1af, 0x73, 0x0, 0x1, [@generic="9d1ffdcfcbed6b305345fce5d8bf36b008c3ced3be88d53fa63ebc3a655277016427551762d7d21e037534aa2ade21c3b0a839ad18d1e76d36a8dd2e691f4160e1a792323fdf83a8b919d243b06f0b424d29abda5399aaf9c075d440459bfae41d0a8a6fe8ecd699c81925a5f74869b3feddefe2", @generic="4da0954f5863285815bf8a8d002dacf51f59ef090d8f024dac2f16a287d09d588b5784ead5c4768b3689043f4ddc601bfb1d20bfd961af63fa8295", @typed={0x4, 0x2}, @generic="556a6b7e729364af0c58b7095e9896d06171f0d00375d63c37b294b2bce802324f26dd1f092dda1d2eb2316033210c68b1c7b4fcb3930521bb303a253477f1fa2132d8f2eff2f4926d418f7b9a68db2212feddb4c719436ab6128ace2ae8696d8bfbddb007bc2d1f249b2c3ea43a651b75f0c05981242e17c17b4dba070ba6b6e24e51978a5dbcce6b669912f4e79a21c11a3953", @generic="fe96c96a7ab893563f17711145693bfcb4795877881a52b9edb0a89c308b4305abcc4d3131670684bc2995b69ec2bf6d482019c21c7cdf367788c7a8a09f5b73f12e0c6ef78ce6c439ab9905a9bcc6b049f66de936f202f2deb125e2", @typed={0x8, 0x9, 0x0, 0x0, @u32=0x7ff}]}]}, 0x12a0}}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x6a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001540)={&(0x7f0000001400)={0x118, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff00}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x33b4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r4, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 476.126633][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 476.299338][ C1] sd 0:0:1:0: [sg0] tag#928 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 476.309978][ C1] sd 0:0:1:0: [sg0] tag#928 CDB: Test Unit Ready [ 476.316793][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.326578][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.336354][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.346200][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.346612][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 476.355979][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.374875][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.384663][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.394651][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.404458][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.414323][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.424169][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.434006][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.443810][ C1] sd 0:0:1:0: [sg0] tag#928 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0), 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 14:15:47 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 476.497862][T15421] input: syz1 as /devices/virtual/input/input174 14:15:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x3f) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:15:48 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0445624, &(0x7f00000000c0)) 14:15:48 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) 14:15:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) [ 477.360999][ C0] sd 0:0:1:0: [sg0] tag#944 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.371569][ C0] sd 0:0:1:0: [sg0] tag#944 CDB: Test Unit Ready [ 477.378307][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.388094][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.397874][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.407657][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.417433][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.427213][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.428851][T15461] input: syz1 as /devices/virtual/input/input175 [ 477.436945][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.437047][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.462781][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.472517][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.482360][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.492136][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.501769][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 14:15:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0xc3}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r4, &(0x7f0000000900)) write$capi20(r4, &(0x7f0000000040)={0x10, 0xffff, 0x2, 0x83, 0x6f, 0xffffffff}, 0x10) 14:15:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x3, 0x80000, 0x8000, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xb0, 0x0, 0xb0, 0xb0, 0x0, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) 14:15:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:49 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 477.946239][ C1] sd 0:0:1:0: [sg0] tag#902 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.956917][ C1] sd 0:0:1:0: [sg0] tag#902 CDB: Test Unit Ready [ 477.963586][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.973371][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.983170][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.992952][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.002755][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.006628][T15486] input: syz1 as /devices/virtual/input/input176 [ 478.012511][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.028484][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.038935][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.048724][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.058513][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.068295][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.078104][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.087871][ C1] sd 0:0:1:0: [sg0] tag#902 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev, 0x3}, 0x1c) 14:15:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x54) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001940)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) [ 478.303091][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.512740][T15496] device bond1 entered promiscuous mode 14:15:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, 0x0, 0x0) 14:15:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 478.644177][T15498] device bridge1 entered promiscuous mode [ 478.651785][T15498] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 478.676596][T15500] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 478.762680][T15500] device bridge1 left promiscuous mode 14:15:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r0, &(0x7f0000000900)) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x40, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x4001, 0x80) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x10001) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x51, "daaa19b3e4c8a1caaedf605234615e0829ecec718718dff3e86bfc2b6fda9f0857394c927d1c0150e932b37b0f6c7ade9add2d9f747ad523a4356004871ce905f5b8cb117f78e7e3a49d27b5e56be866e0"}, &(0x7f0000000180)=0x59) r6 = dup(r5) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e24, @broadcast}}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) syncfs(0xffffffffffffffff) migrate_pages(r7, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:15:51 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 479.299691][ C1] sd 0:0:1:0: [sg0] tag#920 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 479.310491][ C1] sd 0:0:1:0: [sg0] tag#920 CDB: Test Unit Ready [ 479.317252][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.327027][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.330349][T15500] bond1 (unregistering): Released all slaves [ 479.336790][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.352471][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.362191][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.371972][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.381692][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.391582][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.401388][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.402702][T15556] input: syz1 as /devices/virtual/input/input177 [ 479.411111][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.427200][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.436993][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.446778][ C1] sd 0:0:1:0: [sg0] tag#920 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 479.708992][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:15:51 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, 0x0, 0x0) 14:15:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x54) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001940)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) [ 480.073992][ C1] sd 0:0:1:0: [sg0] tag#941 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 480.084563][ C1] sd 0:0:1:0: [sg0] tag#941 CDB: Test Unit Ready [ 480.091205][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.101399][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.111285][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.121021][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.131002][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.140740][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.150572][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.160321][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.170074][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.179834][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.188359][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 480.189619][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.189746][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.218544][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[c0]: 00 00 00 00 00 00 00 00 [ 480.263271][T15611] input: syz1 as /devices/virtual/input/input178 14:15:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r4, r2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {r4, 0x1f, 0x0, 0x0, 0x0, @ib={0x1b, 0x8, 0x1, {"0dafbe868f13880095550a7183b24b76"}, 0x6794378c, 0x6, 0x81}, @in6={0xa, 0x4e22, 0x81, @private0={0xfc, 0x0, [], 0x1}, 0x6}}}, 0x118) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) r6 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r6, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:15:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, 0x0, 0x0) [ 480.463441][T15616] device bond1 entered promiscuous mode [ 480.542398][T15618] device bridge3 entered promiscuous mode [ 480.549852][T15618] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 480.568811][T15622] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 480.636920][T15622] device bridge3 left promiscuous mode 14:15:52 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x0, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 480.974906][ C1] sd 0:0:1:0: [sg0] tag#896 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 480.985671][ C1] sd 0:0:1:0: [sg0] tag#896 CDB: Test Unit Ready [ 480.992388][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.002138][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.011899][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.021593][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.031339][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.037198][T15676] input: syz1 as /devices/virtual/input/input179 [ 481.041060][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.057958][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.067707][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.077453][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.087244][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.096989][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.106719][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.116442][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[c0]: 00 00 00 00 00 00 00 00 [ 481.242596][T15622] bond1 (unregistering): Released all slaves 14:15:53 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x0, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 481.529376][ C0] sd 0:0:1:0: [sg0] tag#913 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 481.540071][ C0] sd 0:0:1:0: [sg0] tag#913 CDB: Test Unit Ready [ 481.546776][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.556608][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.566459][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.576348][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.586197][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.596083][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.605888][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.615760][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.625563][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.634759][T15722] input: syz1 as /devices/virtual/input/input180 [ 481.635605][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.651609][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.661426][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.671417][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:15:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x54) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001940)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 14:15:53 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x0, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 482.001265][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 482.098897][ C1] sd 0:0:1:0: [sg0] tag#931 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 482.100432][T15735] device bond1 entered promiscuous mode [ 482.109609][ C1] sd 0:0:1:0: [sg0] tag#931 CDB: Test Unit Ready [ 482.121611][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.130011][T15737] device bridge4 entered promiscuous mode [ 482.131328][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.138894][T15737] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 482.147368][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.165580][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.175368][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.185234][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 482.195030][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.204841][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.211193][T15739] input: syz1 as /devices/virtual/input/input181 [ 482.214630][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.214731][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) migrate_pages(r3, 0x7fff, &(0x7f0000000080)=0x3f, &(0x7f0000000040)=0xffffffffffffc) [ 482.240391][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.250204][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.259993][ C1] sd 0:0:1:0: [sg0] tag#931 CDB[c0]: 00 00 00 00 00 00 00 00 [ 482.460887][T15791] binder_alloc: 15783: binder_alloc_buf, no vma 14:15:54 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:15:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\n', 0x1, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40010003) [ 483.073127][ C1] sd 0:0:1:0: [sg0] tag#948 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 483.083657][ C1] sd 0:0:1:0: [sg0] tag#948 CDB: Test Unit Ready [ 483.090219][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.100059][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.110111][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.120013][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.129789][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.139590][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.149473][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.159249][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.169040][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.178860][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.188635][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.198411][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.208213][ C1] sd 0:0:1:0: [sg0] tag#948 CDB[c0]: 00 00 00 00 00 00 00 00 [ 483.257402][T15802] input: syz1 as /devices/virtual/input/input182 14:15:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000280)={0x8, 'geneve0\x00', {'bridge_slave_1\x00'}, 0x7fff}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0x63, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r4, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') socket$rds(0x15, 0x5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000000900)) fstat(r6, &(0x7f0000000900)) r7 = dup2(r5, r1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82a9}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7b}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff51}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000040)={0x6, 0x6}) 14:15:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 483.717068][T15823] binder_alloc: 15819: binder_alloc_buf, no vma 14:15:55 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x0, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:55 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 484.125582][ C0] sd 0:0:1:0: [sg0] tag#902 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.136316][ C0] sd 0:0:1:0: [sg0] tag#902 CDB: Test Unit Ready [ 484.143029][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.152804][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.162555][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.172345][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.183071][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.192825][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.202606][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.212412][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.222211][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.232146][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.241923][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.251585][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.261473][ C0] sd 0:0:1:0: [sg0] tag#902 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000440)={'broute\x00'}, &(0x7f00000004c0)=0x78) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x3, 0x3, 0x4, 0x2}) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000280)={0x3, 0x0, [{0x2000, 0xa0, &(0x7f0000000040)=""/160}, {0x100000, 0x60, &(0x7f0000000100)=""/96}, {0x4000, 0xf4, &(0x7f0000000180)=""/244}]}) [ 484.323305][T15829] input: syz1 as /devices/virtual/input/input183 14:15:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) 14:15:56 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:15:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:15:56 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x0, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 484.826688][ C1] sd 0:0:1:0: [sg0] tag#926 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.837313][ C1] sd 0:0:1:0: [sg0] tag#926 CDB: Test Unit Ready [ 484.844054][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.853810][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.855678][T15856] binder_alloc: 15849: binder_alloc_buf, no vma [ 484.863596][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.863694][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.889693][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.899490][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.909413][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.919188][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.928978][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.939227][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.949038][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.958829][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.968611][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[c0]: 00 00 00 00 00 00 00 00 [ 485.011899][T15854] input: syz1 as /devices/virtual/input/input184 14:15:56 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:15:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000040)="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") r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:15:57 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x0, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev}, 0x1c) 14:15:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 485.600622][ C0] sd 0:0:1:0: [sg0] tag#944 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 485.611244][ C0] sd 0:0:1:0: [sg0] tag#944 CDB: Test Unit Ready [ 485.617965][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.627743][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.637498][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.647305][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.657054][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.666830][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.676611][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.686383][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.696170][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.705922][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.715718][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.725453][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.735206][ C0] sd 0:0:1:0: [sg0] tag#944 CDB[c0]: 00 00 00 00 00 00 00 00 [ 485.768479][T15873] input: syz1 as /devices/virtual/input/input185 14:15:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:15:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev}, 0x1c) 14:15:57 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 486.188558][ C0] sd 0:0:1:0: [sg0] tag#911 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 486.199250][ C0] sd 0:0:1:0: [sg0] tag#911 CDB: Test Unit Ready [ 486.206134][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.215879][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.225777][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.235962][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.245927][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.255706][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.265451][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.275288][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:15:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @dev}, 0x1c) [ 486.285026][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.294788][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.304564][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.314425][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.324337][ C0] sd 0:0:1:0: [sg0] tag#911 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 486.399006][T15892] input: syz1 as /devices/virtual/input/input186 14:15:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:15:58 executing program 2: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote, @multicast1}, &(0x7f0000000300)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe57c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}]}, 0x30}, 0x1, 0x0, 0x0, 0x44084}, 0x40) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}}, 0x0) 14:15:58 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:15:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:15:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 486.856080][ C1] sd 0:0:1:0: [sg0] tag#926 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 486.866662][ C1] sd 0:0:1:0: [sg0] tag#926 CDB: Test Unit Ready [ 486.873364][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.883168][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.892982][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.902820][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.912595][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.922390][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.932188][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.941972][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.952046][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.961740][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.971521][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.981300][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.991097][ C1] sd 0:0:1:0: [sg0] tag#926 CDB[c0]: 00 00 00 00 00 00 00 00 [ 487.026207][T15912] input: syz1 as /devices/virtual/input/input187 14:15:59 executing program 2: socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) 14:15:59 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:15:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000300)=0xc) ioprio_set$uid(0x3, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) setresgid(0x0, 0x0, r4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x90, 0xffffffffffffffda, 0x8, {0x4, 0x0, 0x9, 0x6, 0x0, 0x50000000, {0x5, 0x158, 0x8000, 0x1ff, 0x7ff, 0x400, 0x7ff, 0x6, 0x6, 0x2540, 0x5, r2, r4, 0x10001, 0xfffffff8}}}, 0x90) quotactl(0x8000, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)="8ad7b091edc0d90794ac1b59d6c68a066f557592b135c455686d8e3adde115aab3af0a412c74cb1a24f9786d59a4a1d6740dfa87037d5bb54ebc715dbfdb1959c165efd674c6e6c196db4a93eebd613df94dfc36b86d8e326e5d89d238cc2767ab7ed7d0a2ac17649c67483170f806c3f5df556b92f2408c7e03b98736abf18e7b30eae56cb1cab7d4f98a724795b5956571da6399af651fe2aee5cab379fb979eaeba694e7ee3b3ed6c17aeb6c3d3f1e6b37aa664") quotactl(0x1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)="95b0cb66ef396ffe4cd65603d0748d580dae67778d575688c1f6dfa5fb21c9d34c9d1dbe12f95ddb6628a3b44a2590471dd67cc1e51ecd") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = clone3(&(0x7f0000000280)={0x50000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r5, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:15:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:15:59 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 487.534652][ C1] sd 0:0:1:0: [sg0] tag#949 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 487.545303][ C1] sd 0:0:1:0: [sg0] tag#949 CDB: Test Unit Ready [ 487.552001][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.561663][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.571480][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.581254][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.591050][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.600130][T15943] input: syz1 as /devices/virtual/input/input188 [ 487.600792][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.616707][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.626543][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.636345][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.646082][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.655815][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.665530][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.675265][ C1] sd 0:0:1:0: [sg0] tag#949 CDB[c0]: 00 00 00 00 00 00 00 00 14:15:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:00 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 488.280347][T15960] binder: BINDER_SET_CONTEXT_MGR already set [ 488.286848][T15960] binder: 15959:15960 ioctl 40046207 0 returned -16 [ 488.309561][ C0] sd 0:0:1:0: [sg0] tag#903 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 488.320326][ C0] sd 0:0:1:0: [sg0] tag#903 CDB: Test Unit Ready [ 488.327013][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.336767][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.346527][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.356545][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.366345][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.376384][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.386180][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.395939][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.405704][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.415479][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.425299][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.435070][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.444817][ C0] sd 0:0:1:0: [sg0] tag#903 CDB[c0]: 00 00 00 00 00 00 00 00 [ 488.473466][T15963] input: syz1 as /devices/virtual/input/input189 14:16:00 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x9}, 0xa) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 488.812122][T15975] input: syz1 as /devices/virtual/input/input190 [ 488.822773][ C0] sd 0:0:1:0: [sg0] tag#919 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 488.833357][ C0] sd 0:0:1:0: [sg0] tag#919 CDB: Test Unit Ready [ 488.839899][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.850415][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.860182][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.869997][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.879832][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.889599][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.899372][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.909104][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.918865][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.928620][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.938365][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.948116][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.957852][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:01 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 489.390595][T15997] input: syz1 as /devices/virtual/input/input191 [ 489.456219][ C0] sd 0:0:1:0: [sg0] tag#937 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 489.466762][ C0] sd 0:0:1:0: [sg0] tag#937 CDB: Test Unit Ready [ 489.473447][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.483213][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.492965][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.502749][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.512504][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.522352][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.532110][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.541769][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.551529][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.561318][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.571100][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.580853][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.590597][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:01 executing program 2: 14:16:01 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_targets\x00') fstat(r2, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r4, 0x2, &(0x7f0000000000)=0x7fffffff, &(0x7f00000001c0)=0xffffffffffffffff) 14:16:01 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 489.954816][ C1] sd 0:0:1:0: [sg0] tag#896 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 489.965611][ C1] sd 0:0:1:0: [sg0] tag#896 CDB: Test Unit Ready [ 489.972288][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.982015][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.991705][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.001488][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.011225][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.020949][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.030683][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.040406][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:01 executing program 0: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 490.050143][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.059845][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.069674][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.079426][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.089223][ C1] sd 0:0:1:0: [sg0] tag#896 CDB[c0]: 00 00 00 00 00 00 00 00 [ 490.117485][T16014] input: syz1 as /devices/virtual/input/input192 14:16:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:02 executing program 1: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r4, &(0x7f0000000900)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) sched_getattr(r2, &(0x7f0000000040)={0x38}, 0x38, 0x0) r6 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r6, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:02 executing program 2: 14:16:02 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:02 executing program 0: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 490.611540][ C1] sd 0:0:1:0: [sg0] tag#922 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 490.622198][ C1] sd 0:0:1:0: [sg0] tag#922 CDB: Test Unit Ready [ 490.628740][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.638636][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.648434][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.658963][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.668784][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.678590][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.689618][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.700456][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 490.710255][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.720066][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.729838][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.739643][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.749447][ C1] sd 0:0:1:0: [sg0] tag#922 CDB[c0]: 00 00 00 00 00 00 00 00 [ 490.788414][T16036] input: syz1 as /devices/virtual/input/input193 14:16:02 executing program 2: 14:16:02 executing program 0: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:03 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x8, 0x7, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc800}, 0x4489c) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r7, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:03 executing program 2: 14:16:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 491.393180][ C1] sd 0:0:1:0: [sg0] tag#941 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 491.403708][ C1] sd 0:0:1:0: [sg0] tag#941 CDB: Test Unit Ready [ 491.410580][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.420528][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.430287][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.440259][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.450097][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.460120][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.469871][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.479647][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x201d}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 491.489390][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.499153][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.508865][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.518605][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.528422][ C1] sd 0:0:1:0: [sg0] tag#941 CDB[c0]: 00 00 00 00 00 00 00 00 [ 491.569401][T16059] input: syz1 as /devices/virtual/input/input194 14:16:03 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:03 executing program 2: 14:16:04 executing program 2: 14:16:04 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x10ca000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:04 executing program 2: 14:16:04 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:04 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 493.089485][ C1] sd 0:0:1:0: [sg0] tag#900 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 493.100047][ C1] sd 0:0:1:0: [sg0] tag#900 CDB: Test Unit Ready [ 493.107907][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.117722][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.127470][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.137260][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.146989][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.156705][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.166519][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.176333][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.186246][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.196011][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.206281][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.216205][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.226053][ C1] sd 0:0:1:0: [sg0] tag#900 CDB[c0]: 00 00 00 00 00 00 00 00 [ 493.254461][T16100] input: syz1 as /devices/virtual/input/input195 14:16:05 executing program 2: 14:16:05 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r0, &(0x7f0000000900)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x6a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r5, &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r6 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') dup(r5) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r8, &(0x7f0000000900)) fstat(0xffffffffffffffff, &(0x7f0000000a80)) sendmmsg$inet(r7, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="03ed753390d46dde55b2cdb0386a39003eb203d7621b0d9211f9ec3f686c5317e97f18c994f5779eb875f2209c9726b6d627efa49ccb5a67eba6aa62286c706007485d8dbd5a21726da7ca007b856a2d2fbf1fee18ad43463d7d8f822a2af064d27cf6767a2b16694ab461a0aba7670e6c28617fb5548be067a521408398b8a368d340f3489eb3b3142c7f06e2cacbb508b9b1b383cfad25a4a6e02eb678", 0x9e}, {&(0x7f00000001c0)="b3b4212d494b3d06171b4a593e5e94f10238ce0afd0f748d749f8b19d11466d54a2bbc82ce857241becd0bbbec30c1f910c5c79be183245eabff06dd1408551bf7355c27d92a57ee454f77ffbbb462f7d914f009a1", 0x55}, {&(0x7f0000000240)="d94751bf95f62009cdd52d13b67c9e3349eb5997a34c8eca2716778f0cf4788f413ac6d4f32dd416df602ed16b25ce3a828e4d790e518d7f46740679939e60dde00faba0a20d6aedb768219079bd7c21fadfa95707b1e4d45998f1b8e56e87fb07f8578d5cd3e10a4df53bacaa43fb2df4ab62993f9fcc76daf80ec6929073b870e4033510a8d298a186d2307248bd9f74b13a74a3c77baa0fe04a60b7c4b668bbef6c9cc035b095dcb554ca9d93ae317a7e369900241916619c4bf6772dc6c8758ec26a5f56ab6f47ddea13f0a1f1133997a9b14ca68a3dd3", 0xd9}, {&(0x7f0000000340)="816518640cc1bf4e904cb327e19ffd83eaf8cfd0147aaa04ac22cdbd8665cb12cc54ea56e66492e9ef9077e4bfbea59883f5c19de69380243b08ff1b49bcb1b6b4054bbc13b16c7b7d286937372c721bac05007d9a4779da5d508edf2486c366d9076535ab012dc81d7b5096b51f157ce8f6ab8cb689b781d6a5fc417265e0dfa5e8f4e67fc62922f9a5b4d24a8c28c625c4c339c9b831c1c75c12930d255856b93c55f51a3313ceec57884c8ea48d043e3049e9ab91819b5bc77efa8846229d8bda34644ad6d9a7e404cec4089d9da58129325d33bb6af106ed6570b4cace010ee4d12cc1fca8608a65f7950dd717770ce1777a2a16", 0xf6}, {&(0x7f0000000440)="6ec3d3d1c7923f9fd10897347a1a4269ef0e5d7ec79113aa357944e313a3891945556cd99522cd310f9d75b04330225e48788171a792145e095b027230bed0488381791c8ec9a2a8f783363c71ad5239a2dd4947053e7f3c274709891e6c59ac3e217afdfec8549fd064ab7ca1258de2b26b861580ad9d9131f6aa852300e97c7f732aaba628b6ec5bcf84d408494d78f6afca16a079965c431c3dd2d85dcc6e8770dce8c11c34bb9e5305748f8c25ef9c73f1f43cf7c47c8877d78468ad22207ad6cfc0951d20a29e0e29f9563123a9c6b5", 0xd2}, {&(0x7f0000000540)="d79b5a08fb2e43f42ee058c9d8285cf955831409243a568a49c6c4e7f8b366ef7778450a11c5d72396e8ff56dbd18e1c9daa087f9ae85f2e4c4a13a4076559a3f804875d707c486fefbe09e49a1d3ec92748d7609d35334faf63bfcada31222e60c061e04117f3e6dc3047775ed91ebc9d0a4124d2d190359b1e27f4f3c95707a2b944990abdcde623f9f9c4dfb192bcfcc0e4558b54ca496dfca65f660319fb82b34d6ea0782526a5", 0xa9}, {&(0x7f0000000600)="6ff1ebe09379f17b87dc0f170cf079f46333e9503facacaef9b618542d85557811f886c8572e9ca8002fee3e54dbf5d8bfa7095bddc83abb1bed4ced69e9757e7c9777b7a3d1cbe1be22d8b130ca9d70118cefd51105174d2bc5b3b0d807c9a608289c42897c844fef7bf56d1628860d9c22b584c07b47d743edf2874c1123d67b06d8bf4631b59aff2cf9ebf2833f88a369761b20dcda51694579e0caa712929f8fac7c4184dfbbc1bb532116d3c2d8", 0xb0}], 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="11000000000000000000000001000000010000000000000030000000000000000000000007000000440afcf02f6fa4320c0200890b3633aaecb99efde7cb0707f9e000000101010050000000000000000000000007000000441c709364010100000000027f000001000000087f00000120000007890b81ac1e0101ac141429861800000003020c001a1652bda5d1af7c9801049ce1049101110000000000000000000000010000000100000000000000110000000000000000000000010000000400000000000000"], 0xc8}}], 0x1, 0x4000080) migrate_pages(r6, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:05 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:05 executing program 2: 14:16:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x5, 0xf37, &(0x7f0000000040)="714b5f886f3a177b6e8a74eebfd4ba53408f4b428fa480c2b7536723b2389c9ea28e8412d048ed7d0290", 0x2a) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x80000001, 0x200, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = clone3(&(0x7f0000001680)={0x20000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 493.698554][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:05 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 493.955144][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:06 executing program 2: 14:16:06 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:06 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 494.420870][ C1] sd 0:0:1:0: [sg0] tag#923 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 494.431464][ C1] sd 0:0:1:0: [sg0] tag#923 CDB: Test Unit Ready [ 494.438179][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.448051][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.457853][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.467710][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.477505][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.487322][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.497099][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.507013][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.516885][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.526714][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.536526][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.546303][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.556106][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[c0]: 00 00 00 00 00 00 00 00 [ 494.601065][T16136] input: syz1 as /devices/virtual/input/input196 14:16:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) fstat(r1, &(0x7f00000000c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8001) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r4, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000140)) 14:16:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) r2 = clone3(&(0x7f0000001680)={0x80000000, 0x0, 0x0, 0x0, {0x100000}, 0x0, 0xffffffffffffff8f, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast1}, &(0x7f0000000080)=0xc) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 14:16:06 executing program 2: 14:16:06 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:06 executing program 2: 14:16:07 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:07 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) migrate_pages(r2, 0x6, &(0x7f0000000040)=0x40000007fffffff, &(0x7f0000001ac0)=0x3ff) 14:16:07 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:07 executing program 2: [ 495.616658][ C0] sd 0:0:1:0: [sg0] tag#899 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 495.627371][ C0] sd 0:0:1:0: [sg0] tag#899 CDB: Test Unit Ready [ 495.634072][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.643865][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.653616][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.663429][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.673205][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.682956][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.693143][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.702863][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:07 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000b20000000000014"], 0x30}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xa, 0x80000000, @l2={'ib', 0x3a, 'ipvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x10) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000001c0)={0x0, 0x2, 0x8, &(0x7f0000000140)=0x1000000000000000}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000200)={0x1, 0x0, 0x20, 0x9, 0x189, &(0x7f0000000380)}) dup3(r0, r1, 0x0) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r5, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:07 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 495.712633][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.722495][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.732253][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.742003][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 495.751641][ C0] sd 0:0:1:0: [sg0] tag#899 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:07 executing program 2: [ 495.834329][T16168] input: syz1 as /devices/virtual/input/input197 14:16:07 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:07 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:07 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:08 executing program 2: 14:16:08 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 496.398056][ C1] sd 0:0:1:0: [sg0] tag#923 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 496.408831][ C1] sd 0:0:1:0: [sg0] tag#923 CDB: Test Unit Ready [ 496.415540][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.425440][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.435224][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.445082][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.454844][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.464636][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.476344][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.486143][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:08 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x7fff, 0x9}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r4}, 0x8) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e00000/0x200000)=nil, 0x3000, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r5, &(0x7f0000000900)) ioctl$CAPI_INSTALLED(r5, 0x80024322) [ 496.496047][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.505844][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.515666][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.525451][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.535257][ C1] sd 0:0:1:0: [sg0] tag#923 CDB[c0]: 00 00 00 00 00 00 00 00 [ 496.579254][T16203] input: syz1 as /devices/virtual/input/input198 14:16:08 executing program 2: 14:16:08 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:08 executing program 2: 14:16:08 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:08 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:08 executing program 2: 14:16:09 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:09 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:09 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:09 executing program 2: [ 497.542987][ C1] sd 0:0:1:0: [sg0] tag#898 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 497.553639][ C1] sd 0:0:1:0: [sg0] tag#898 CDB: Test Unit Ready [ 497.560175][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.570247][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.580049][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.589813][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.599600][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.605292][T16243] input: syz1 as /devices/virtual/input/input199 [ 497.609367][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.625255][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.635049][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.644852][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.654605][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.664372][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.674151][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.684348][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:09 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:09 executing program 2: 14:16:09 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:09 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 498.079190][ C1] sd 0:0:1:0: [sg0] tag#918 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.089739][ C1] sd 0:0:1:0: [sg0] tag#918 CDB: Test Unit Ready [ 498.096486][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.106272][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.116151][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.126003][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.135811][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.145582][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.155353][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.165284][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:09 executing program 2: [ 498.175298][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.185637][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.195429][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.205341][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.215097][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[c0]: 00 00 00 00 00 00 00 00 [ 498.255344][T16259] input: syz1 as /devices/virtual/input/input200 14:16:10 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:10 executing program 2: 14:16:10 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) dup2(r4, r5) ftruncate(r4, 0x10004) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000000900)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x7fff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x3}, 0x0, 0x0, &(0x7f0000000280)={0x3, 0x9, 0x0, 0x800}, &(0x7f00000002c0)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x9}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r6, 0x10, &(0x7f0000000440)={&(0x7f0000001b00)=""/4096, 0x1000, r7}}, 0x10) sendfile(r4, r4, 0x0, 0x18000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f00000001c0)={r8, &(0x7f00000000c0)=""/232}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000040)={r8, 0x1}) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:10 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 498.733965][ C0] sd 0:0:1:0: [sg0] tag#937 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.744626][ C0] sd 0:0:1:0: [sg0] tag#937 CDB: Test Unit Ready [ 498.751158][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.761019][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.770847][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.780737][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.790506][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.800280][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.810049][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.819874][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 498.829644][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.840190][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.849954][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.859724][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.869490][ C0] sd 0:0:1:0: [sg0] tag#937 CDB[c0]: 00 00 00 00 00 00 00 00 [ 498.917518][T16278] input: syz1 as /devices/virtual/input/input201 14:16:10 executing program 2: 14:16:11 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:11 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:11 executing program 2: [ 499.615479][ C0] sd 0:0:1:0: [sg0] tag#896 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.626100][ C0] sd 0:0:1:0: [sg0] tag#896 CDB: Test Unit Ready [ 499.632817][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.642571][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.652331][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:11 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 499.662150][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.671925][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.682659][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.692417][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.702272][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.712044][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.722000][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.731648][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.741376][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.751178][ C0] sd 0:0:1:0: [sg0] tag#896 CDB[c0]: 00 00 00 00 00 00 00 00 [ 499.816710][T16302] input: syz1 as /devices/virtual/input/input202 14:16:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:11 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/242, 0xf2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r3 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) shutdown(r2, 0x0) shutdown(r1, 0x0) 14:16:11 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 500.267657][ C0] sd 0:0:1:0: [sg0] tag#913 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 500.278291][ C0] sd 0:0:1:0: [sg0] tag#913 CDB: Test Unit Ready [ 500.284995][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.294782][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.304568][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.314490][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.324334][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.334155][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.343975][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.353782][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.363588][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.373402][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.383224][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.393146][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.402995][ C0] sd 0:0:1:0: [sg0] tag#913 CDB[c0]: 00 00 00 00 00 00 00 00 [ 500.424194][T16325] input: syz1 as /devices/virtual/input/input203 14:16:12 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000180)) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) fstat(0xffffffffffffffff, &(0x7f0000000900)) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x5c) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r4, &(0x7f0000000800)) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r5, &(0x7f0000000900)) r6 = creat(&(0x7f00000006c0)='./file0\x00', 0x14d) io_submit(0x0, 0x6, &(0x7f0000000740)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x70, r1, &(0x7f0000000340)="f953187cb45de11714d372bc580e80a32d8cf805f694088c78c9d824ea2b92546345250b5f2d4fe76e1a11cce5050f2e9c87ab6e6b59e3924fcf8eb67804fa5c2a7844a2b2a80528bee98970a424befdc79e1835aa3b3f428e4b9d5cb0e292f00b1b9ea966e6654f9091f7eb6116d288969d68f8284f61b0b84e1d2d10609d638a406431", 0x84, 0x2, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x9, r3, &(0x7f0000000440)="b55131cebc47c6cdb458d14f36256d918318c78d948ecf4f750ad5655725a1b1c0a1f5f9ebe76fb94be5dea3252ce2191735a716af9640c72c0797b330d202a6dac240a0041beed8b90e75554f7c5b6629cd873e8e963326d54fff1c3a8dd52f4309384cda", 0x65, 0x7, 0x0, 0x0, r1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x1, r4, &(0x7f0000000500)="7b8686e0ad026852a45222c04caebd739f29dec01a6d6790075105105b2a53e10a85b983d8e6b951244c0105d0c4e27fca2a9746fca11e8192fbfedbf30f724bcac7d39a09f38336cfe25a05b343f993b756f57693d5817184734246f51d", 0x5e, 0x6, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x9, r5, &(0x7f00000005c0)="b823f879f3cc7db1f3778bd1d273cb316885a0b89a6c8d0838809f9681fa6c51b72fd101c9ac4166f0168dccc163eba7eee10da06a89c4cddfaf7c16217019a9b6a2e9d7c2dcd21ef7921152305e2a8c71e10bd7c23eca03050f22528b12e1", 0x5f, 0x81, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000680)="a141d38b7ba3805a63aa24df0a63e5c29630c744063518d4865ecea61b152a05f57dfb00a7db76625a", 0x29, 0x6, 0x0, 0x0, r6}]) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r7, &(0x7f0000000900)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r9, 0x711}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe0011000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200027bd7000fcdbdf2505000000961fc221a8eafe75640fbf085b68ff6294eb75bb7035fe"], 0x28}}, 0x40000) 14:16:12 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/242, 0xf2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r3 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) shutdown(r2, 0x0) shutdown(r1, 0x0) 14:16:12 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 500.895051][ C1] sd 0:0:1:0: [sg0] tag#927 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 500.905667][ C1] sd 0:0:1:0: [sg0] tag#927 CDB: Test Unit Ready [ 500.912324][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.922050][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.931706][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.941491][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.951333][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.961073][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.970811][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.980527][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.990237][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.999959][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.009688][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.019425][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.029134][ C1] sd 0:0:1:0: [sg0] tag#927 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:12 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 501.069441][T16349] input: syz1 as /devices/virtual/input/input204 14:16:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/242, 0xf2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r2 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 14:16:13 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:13 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040)={0x0, 0xffff}, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/169, 0xa9}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r2, 0x0) accept$inet6(r2, 0x0, 0x0) shutdown(r1, 0x0) 14:16:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:14 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:14 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) [ 502.326352][ C0] sd 0:0:1:0: [sg0] tag#950 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 502.337082][ C0] sd 0:0:1:0: [sg0] tag#950 CDB: Test Unit Ready [ 502.344472][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.354966][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.364759][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.371367][T16403] input: syz1 as /devices/virtual/input/input205 [ 502.374536][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.390668][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.400490][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.410399][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.420323][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.430169][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.440227][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.450426][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.460191][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.469960][ C0] sd 0:0:1:0: [sg0] tag#950 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:14 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 14:16:14 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 502.627588][T16416] binder: 16414:16416 ioctl c0306201 0 returned -14 [ 502.744185][ C1] sd 0:0:1:0: [sg0] tag#903 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 502.754802][ C1] sd 0:0:1:0: [sg0] tag#903 CDB: Test Unit Ready [ 502.761346][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.771150][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.780956][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.790748][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.797112][T16422] input: syz1 as /devices/virtual/input/input206 [ 502.800497][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.816485][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.826268][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.836052][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.845845][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.855655][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.865445][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.875233][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.884983][ C1] sd 0:0:1:0: [sg0] tag#903 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:14 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 14:16:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0xfffffd46, &(0x7f0000000680)=[{0x0}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x2}, 0x42) r1 = dup(r0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0x0) accept(r4, 0x0, 0x0) shutdown(r3, 0x0) 14:16:15 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:15 executing program 1: r0 = semget$private(0x0, 0x2, 0x100) semop(r0, &(0x7f0000000040), 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000040)=""/219) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:15 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 503.701533][ C0] sd 0:0:1:0: [sg0] tag#919 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 503.712130][ C0] sd 0:0:1:0: [sg0] tag#919 CDB: Test Unit Ready [ 503.718702][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.728568][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.738366][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.748319][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.758094][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.767881][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.776249][T16448] input: syz1 as /devices/virtual/input/input207 [ 503.777617][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.793568][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.803359][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.813165][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.822960][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.832753][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.842698][ C0] sd 0:0:1:0: [sg0] tag#919 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/242, 0xf2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) r2 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) shutdown(r1, 0x0) [ 503.916547][T16455] binder: 16444:16455 ioctl c0306201 0 returned -14 14:16:15 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:16 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 504.330656][T16471] input: syz1 as /devices/virtual/input/input208 [ 504.496819][ C0] sd 0:0:1:0: [sg0] tag#941 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 504.507387][ C0] sd 0:0:1:0: [sg0] tag#941 CDB: Test Unit Ready [ 504.514083][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.523900][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.533670][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.543434][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.553306][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.563070][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.572840][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.582634][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 504.592395][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.602157][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.611928][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.621598][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.631354][ C0] sd 0:0:1:0: [sg0] tag#941 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:16 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:16 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 14:16:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r4, &(0x7f0000000900)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000200)={0x150, 0x0, 0x8, [{{0x3, 0x1, 0x0, 0x6, 0x3, 0x7f, {0x5, 0x1, 0x0, 0x8000000000, 0x362, 0x80000000, 0x5, 0x5, 0x8001, 0x9, 0x9, 0x0, r3, 0x3ff, 0xffffff33}}, {0x4, 0x233f, 0x5, 0x5, 'task\x00'}}, {{0x3, 0x3, 0xe05d, 0x6, 0x78, 0x10001, {0x6, 0x200, 0x6, 0x2, 0x2, 0x1f, 0x10001, 0x7fff, 0x400, 0x2, 0x7ff, r5, r7, 0x7fffffff, 0xffffffff}}, {0x2, 0x2, 0x5, 0x4, 'task\x00'}}]}, 0x150) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r8, &(0x7f0000000900)) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) migrate_pages(r9, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 504.837652][T16483] kvm: emulating exchange as write [ 504.901516][T16487] input: syz1 as /devices/virtual/input/input209 [ 505.002492][T16499] binder: 16493:16499 ioctl c0306201 0 returned -14 14:16:17 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 14:16:17 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 505.268455][ C0] sd 0:0:1:0: [sg0] tag#901 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 505.279026][ C0] sd 0:0:1:0: [sg0] tag#901 CDB: Test Unit Ready [ 505.285720][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.295572][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.305344][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.315180][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.324976][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.334760][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.344525][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.354298][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.364056][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.373833][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.384315][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.394086][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.403849][ C0] sd 0:0:1:0: [sg0] tag#901 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x7, &(0x7f0000000040)=0x7fffffff, &(0x7f0000001ac0)=0x2) prctl$PR_SET_DUMPABLE(0x4, 0x1) [ 505.779518][T16518] input: syz1 as /devices/virtual/input/input210 14:16:17 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 505.854347][ C0] sd 0:0:1:0: [sg0] tag#921 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 505.864906][ C0] sd 0:0:1:0: [sg0] tag#921 CDB: Test Unit Ready [ 505.871443][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.881329][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.891094][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.900903][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.910686][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.920459][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.930236][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.940012][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.949778][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.959547][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.969296][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.979066][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.988780][ C0] sd 0:0:1:0: [sg0] tag#921 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:18 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 506.283637][T16533] binder: 16530:16533 ioctl c0306201 20000200 returned -14 14:16:18 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 506.395018][T16539] input: syz1 as /devices/virtual/input/input211 [ 506.691118][ C0] sd 0:0:1:0: [sg0] tag#940 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 506.701682][ C0] sd 0:0:1:0: [sg0] tag#940 CDB: Test Unit Ready [ 506.708420][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.718186][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.727969][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.737744][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.747939][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.757694][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.767487][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.777310][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.787182][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.796988][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.806815][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.817436][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.827257][ C0] sd 0:0:1:0: [sg0] tag#940 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:18 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:18 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 507.210842][ C0] sd 0:0:1:0: [sg0] tag#910 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 507.221568][ C0] sd 0:0:1:0: [sg0] tag#910 CDB: Test Unit Ready [ 507.228246][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.238099][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.247872][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.257794][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.267557][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.277352][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.287084][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.296844][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 507.306665][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.316439][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.326233][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.336024][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.345795][ C0] sd 0:0:1:0: [sg0] tag#910 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:19 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 507.420854][T16557] input: syz1 as /devices/virtual/input/input212 [ 507.444858][T16560] binder: 16559:16560 ioctl c0306201 20000200 returned -14 14:16:19 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0x804, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:19 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 508.003935][ C0] sd 0:0:1:0: [sg0] tag#932 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.014669][ C0] sd 0:0:1:0: [sg0] tag#932 CDB: Test Unit Ready [ 508.021206][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.031086][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.040834][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.050584][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.060343][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.067524][T16582] input: syz1 as /devices/virtual/input/input213 [ 508.070089][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.086036][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.095770][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.105529][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.115316][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.125074][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.135538][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.145286][ C0] sd 0:0:1:0: [sg0] tag#932 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:20 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:20 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) [ 508.434715][T16593] binder: 16592:16593 ioctl c0306201 20000200 returned -14 14:16:20 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e24, @dev}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 508.580454][ C0] sd 0:0:1:0: [sg0] tag#948 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.591078][ C0] sd 0:0:1:0: [sg0] tag#948 CDB: Test Unit Ready [ 508.597785][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.607617][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.617471][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.627259][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.637008][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.646798][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.656622][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.666447][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.676281][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.686120][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.695963][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.705812][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.715603][ C0] sd 0:0:1:0: [sg0] tag#948 CDB[c0]: 00 00 00 00 00 00 00 00 [ 508.728544][T16599] input: syz1 as /devices/virtual/input/input214 14:16:20 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "24f982b305458bce780bfa276b3f47ed577a46aa0c76ab9c49be3406e34baf0c3e6b4cc96f3510671a7e8103085c25f6afaed7e8a6fb99ae691b42a4e13bd5cd"}}, 0x80}}, 0x0) 14:16:20 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capget(&(0x7f0000000040)={0x19980330}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) [ 509.118366][T16611] input: syz1 as /devices/virtual/input/input215 [ 509.302529][ C0] sd 0:0:1:0: [sg0] tag#905 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 509.313093][ C0] sd 0:0:1:0: [sg0] tag#905 CDB: Test Unit Ready [ 509.319628][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.329502][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.339337][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.349179][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.359012][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.368825][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.378593][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.388395][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 509.398183][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.408022][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.417861][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.427733][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.437503][ C0] sd 0:0:1:0: [sg0] tag#905 CDB[c0]: 00 00 00 00 00 00 00 00 14:16:21 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 509.522206][T16625] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 509.537640][T16629] binder: 16628:16629 unknown command 0 [ 509.543488][T16629] binder: 16628:16629 ioctl c0306201 20000200 returned -22 [ 509.684634][ C1] sd 0:0:1:0: [sg0] tag#918 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 509.695371][ C1] sd 0:0:1:0: [sg0] tag#918 CDB: Test Unit Ready [ 509.702029][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.711697][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.721513][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.731345][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.741117][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.750899][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.760693][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.770493][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.780262][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.790074][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.799864][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.809673][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.820487][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[c0]: 00 00 00 00 00 00 00 00 [ 509.863885][T16632] input: syz1 as /devices/virtual/input/input216 14:16:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:22 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x4, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000240)="5513f4e89e3c8da1848df8ca7dbea97e128028151888608175ab1de56e3eb5ddc6c8618629bfcca410adaab4dee3fde34a189c01b294f78c2ed274039039a686d6f99c161e8d27068d5751171fc74ca4ae00409fd9ab7696a75bd8642bb6bcfd9946c09910ca05b5f717d0d2f96b8dc2d3d8c7c24a37a60c4a46bf205c11e103fb5ec1d55ca6f8eaa58f8e6db24cf71a6a5d99ebb1ebff159fb3cb43c012a675265e389408b0ec3a459f769b3267", 0xae}], 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c005}, 0x840) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14}]}}}]}, 0x60}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r8 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) migrate_pages(r8, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x8001, 0xff, 0x10000, 0x10001, 0xf, "1caf7bbfc78cb031c19268883642adcbd082e0"}) [ 510.603732][T16653] binder: 16652:16653 unknown command 0 [ 510.609523][T16653] binder: 16652:16653 ioctl c0306201 20000200 returned -22 [ 510.650369][ C0] sd 0:0:1:0: [sg0] tag#933 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 510.660929][ C0] sd 0:0:1:0: [sg0] tag#933 CDB: Test Unit Ready [ 510.667625][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.677448][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.687199][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.697034][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.706819][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.716607][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.726382][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.736142][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.745901][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.755657][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.765433][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.775212][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.784983][ C0] sd 0:0:1:0: [sg0] tag#933 CDB[c0]: 00 00 00 00 00 00 00 00 [ 510.853325][T16659] input: syz1 as /devices/virtual/input/input217 14:16:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 511.060620][T16677] binder: 16676:16677 unknown command 0 [ 511.066803][T16677] binder: 16676:16677 ioctl c0306201 20000200 returned -22 14:16:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:23 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x0, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 511.374025][ C0] sd 0:0:1:0: [sg0] tag#957 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 511.384647][ C0] sd 0:0:1:0: [sg0] tag#957 CDB: Test Unit Ready [ 511.391173][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.401025][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.410806][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.420658][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.430420][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.440308][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.450087][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.459855][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.469625][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.479488][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.489251][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.499027][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.508791][ C0] sd 0:0:1:0: [sg0] tag#957 CDB[c0]: 00 00 00 00 00 00 00 00 [ 511.553697][T16688] input: syz1 as /devices/virtual/input/input218 [ 511.608559][T16694] binder: 16693:16694 unknown command 0 [ 511.614435][T16694] binder: 16693:16694 ioctl c0306201 20000200 returned -22 14:16:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./file0\x00', 0x12307d, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff6, 0x10, r2, 0x0) 14:16:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r4, 0x400454ce, r5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}) fchown(r0, r3, r5) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000000900)) ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r7, &(0x7f0000000900)) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r8, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x10006095}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:xserver_misc_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x1b}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000d804}, 0x0) 14:16:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) fstat(r1, &(0x7f0000000140)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) dup2(r3, r4) ftruncate(r3, 0x10004) sendfile(r3, r3, 0x0, 0x18000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f00000001c0)={r5, &(0x7f00000000c0)=""/232}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000100)={r5, 0x2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0xb, 0x9dcd0477419b4a41, 0xffff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r8 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r8, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:25 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x0, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 513.480285][T16709] binder: 16708:16709 unknown command 0 [ 513.486159][T16709] binder: 16708:16709 ioctl c0306201 20000200 returned -22 [ 513.568605][ C1] sd 0:0:1:0: [sg0] tag#914 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 513.579140][ C1] sd 0:0:1:0: [sg0] tag#914 CDB: Test Unit Ready [ 513.585904][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.595706][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.605476][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.615314][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.625114][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.634913][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.644774][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.654565][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.664342][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.674140][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.683920][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.694134][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.703944][ C1] sd 0:0:1:0: [sg0] tag#914 CDB[c0]: 00 00 00 00 00 00 00 00 [ 513.750503][T16714] input: syz1 as /devices/virtual/input/input219 14:16:25 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 14:16:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x800000}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:26 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x0, @private=0xa010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="0f71d7080f28ccb9680900000f3266b803008ed0c744240000800000c74424024600c0fec7442406000000000f01142466b8c9008ed826f326d39e00000000c4e279332bc4c379636f8838f3e1e9", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="fee90e082effdede49828f17aae509a82a116c11a0dff5cd21b7b0a819fea40739f35f4f779842e7432ef1d604b902704c043022804198da642017018f13d2d4aa3a5a0a9ecadfa5011eee512d50123c737a3cebb4079fda25f25675840e2d0df81c3ca59e1d066885953e26c8eabf3f9a764340f629cbdcdc965b2ffe5349c0f7c9bd4d9f4ae8a612724da165d187b345ee11fcd370b5d0ad5bf092ae5b4f824935e7566e520b2dae07b765df0a1ab4123a6e87df43dda810ccc3460781655769f7b75ee5d80d983db380f947e24c8290d7291edd9a442eda7c59d4665365ddfe06de17e8db443645257a27201d168d39bc792458a426e86d000515035c8eab9f32aaee8c9120df274403b1898f329b2cf5321aa08319ae6653a85cc3620149224a3fe9b16cb20ed7a2b415b556d2b593e9da611072bbe084303c9ec048598c4995da1825a76860f0615b71c28843a8bcb7ffdb1f9b3b59ae4bfc1161cfca532e5243477d420a62dcc5276878e2965bb9841070cee526687541b267fee3088f64b21ff6b4cacbb1a84f9410a0066e83203abbe900dcc6af83ea7f379954bce823c238175c20fd5213bd6450d183cda562355b671c07a0eaba844a6aecf54aab3e3c74f2c14735a885330e93e461da1016bc095fb4cade61a822cefc594d6d71f41c9f3ca6d0ca8a9ac7428da61e7b2dd557ea3f2b570efe22c3d9b29033b7eec9eec2a690b41b589c19a766dc400516cb722592efd7175433748ee313ff5eb4aadf89ca5c17081d9fed634b3623472e5b4af96a227f162d03529587a5e207b8d30d84e91ee97fe93ccd25f721d781fc5c04ac0528604450392987e49c28d24292cbbf2edafd7a85dc3e63a7f66a78f5649a63e32773102b198d6e40661ceacf4f18d3880911cd69976717b6200154549494d49f374ca42fd1bf50232473db19be7b4559b3df81c7ce713bad88ab90306260aded1efcfa23456932e95fff91c6c19fdbf985226f2580f9aa1254ac34e422817d6a1b8d24113fe1620de62e22d2d9d30aa9a99d71f1d3f6c333cee101b25f061873ac5ba077e68b5af0e8f5a1c562bcad59923685bc05d928b8bdabe8c9283775a1e96d5c2b255f5fafe841986f0e82d10b6bfc6f5508b36ed6c65f82ee8bd4fd6664a046e299f9c2e99f9b0146353962e14566b55b527e79b6a5bb7040744d31dd8d44d2ede941e32853b082212e06f33997493f6b953cdb1174cfc4fe37c5e560b1f4ace0d9859a270984154fda82e8cecea2239739d27db82979e4fbc5f1529ad305d8fe7a8d9eea6fadf947a0ad95902c3113ac671b97d0be5664f5ef393013cb839c7d52ffbf82a5a82a30295ed6e86cd1aacbf65b4a4bd210a9dfab8ae5673260a9f65d3c989641783135e73fcc60d4f2031455b2420d95bd0a866f4cf4db532e5d888bc92474981d7594aaaeb3354adc2c74b69b03fbbe24ca60332140404f4415ae075626069c2a37e91e16e25e34f24410c351ae2c18e186d5495e1877d7b0c82333d1770a2b10a4362e2ae0aadc8668e81bc8d69d20798d395464b9d81e2c300aea5ca9392e37f3c191a89d6e0791a8bf6958c64d945399e210ae9e72e0231fee10d2836fddc18f4178b9114ccd3cd1d14b51260fe6390ea6956607853a645548069ff1a68a3d1298cd7baf2e20bfca27af8076e9a39774d65a8bf1e6be1811ce3b7ea9ae6290ec31626f75156e77727907f648645ae689d09d4055786356ad38c7b5c6aa631f5a19bbac14214c7fe881ab4ab1d02d62e1b07eda17108cb1f71676ef6e70be52ee71ea08371b661701b60918bc2c8521863c718ecdf41c67343c2c067d5da3d6b8a9edd059a139eb6299c1e2ec79a8840746c40d3055c4c142d97232952b8136c18a23473a320e3b0b7faa24e5307d239fbd00d7a6116c04cd6f5e89e02b934a790cc4be106ab247e5edb5d226d271a4d9dc2feed4c3ce6740900101c8d4d0655e04df8003a7264ff9e54e93c10f43db27f3e2be9cab459005706c4c975c49481a540c4bc15a03b41afa0376e066f3bc1ba0dc9f68997003e81dd732a2a5f096d00b2099f786229a2a859e007ce17348f19e250e504e9b099e7c71bb918808defbd9aa1f282346067a457199337ed4dc0355dfacfeaef55257e7fb39e99c3fdb6428502b6fa73dbec4a47e92873f2f15b7e46124384be7e9b37f0908d73ed22d4cb665d065b660ee11ff328750c92fb380975478b5c0d39a9558f6fe7b82ba20b53d2d04da9029b6c4562f2475a2c03f4148fa6f3c16853c99930a73495ac99a983368ae8adb5b49304125f98cdce9b715da3fe5ff51b9f75c93f50cf92d6f9bdbc2fb45d032f8c1ab515353b0f4ecb1eb344e3d987b7ed7171d191f0acc3b547f5e220d9f4687ccf8ed8b3523347cc2d653a87124e08733be0457adb00e9de67ead487a0e702a18c352769e8036f88979e0babe0cd8a942883b58216f5aa2038a6a58375a1e8b6cdae9cd98cb77c11784913fb2a463889c4f80e4623fbdbce774d1d18eda1f6ec079066772238c33b4b1bfb441112ec04f8c00222740ead01c471953d63aa6c25a63ba75516c32245bfee9f7ba49c90d0e26d9b5f932b3e88acc3b446999023fbc1b41a3a8cea9ed9cd034174414664221cc3a469e9534f5afb02c50318ba22d87f2a2acc6a0cf7b4fd709c236a2a74290865c47a3572fb3a16002ab9987383d1c901e76e185a1b177e1a0d02b9b94f43a9b1e84e97e322bae3c0e7c8870a6b68956c141fe5087efda117f36c81e0c4b543b57766c61b67ff6cf9a12b9dbd6276c2174d77e8021b377c2ad9b1d3ddcd76ba8c5543f72509c578d5861bd663227a228d6ce1931b235caf66c29f4e2a0ae90dc473665f514c0db6c91dc010ca817a29753f7c4c8337ad887517039274a2257dd51390a17132204c0d158abc734c8ead52b009f09b432c2ba6d27a425d5af61d6d57606d975102034a80920de8fd087539872e8780790ece0ace843188f5496a3177a8d450e8452c5215f86ec522407c64acccddec449ad931150887d728ce006fbaa840572fdc8063dda28ec0396548fb8e4986c86e33439b57a60595ad3d274871cf16440c267b40ea4aabcc44bb891ca42f98c3e716cf7367eb89ff5e3501d61358b581922870d7a2ec1a47a567c96615103484a6e94d00f80110b95ce83001680d0abf0bc8e39bdf26b50369e82bcfc1804335f02888cdb96f938e5093ebf41f6d8e56c06b5291979c93b696ca77e687d5a9971d7962f150200e193dcd5a7ee01a8d36619f885d0cb7fa95263e6a954efb940109c9ce57a906483717650252d4d70faabb7bc2d13a482c3b0418a4ba46e417e9b8d94b1745aae83662c200838fab2a634ee05bdb13ac362874fce9d0b8a9d1979c23611796371b4ada2b107e9720db8aee190c6e7e78a2f3fccf09b7b4d16b62acdfbb2fdf823f2f912bd2d45b1174c5511b06f7d1e14639916ee141830eb9a52dc939bcb53b910fee618f3d769d82d81ee219847680a5bcc7dd5f2c927d55ad469f991cfb0d068e70adcd9dd04a833fceccf977ba8074a48b15fa176f805725d679e2f0ae98d00447039a040e596365f0e3f970964069fef6e60000140465fd54618355fe297d686bea8fff5d4de111968a63141cfded70800fd497f6c81c987dddca520ed085c81bd0babfe93620adc682af44637f697aa139e27f3477e222f76ae295608862271411ed1820963553e76f9258d7567569a09c373fffdc3e6200c76562eeb620d85de2d20d715a1b13c7d82086a242ba57d9777dc08887cc1eb709bfeee8b0d5fdfa1a3c51182278cc64a02a3bb1dd6b3c2816555a02d291edd41f15c58c137a4b830ba068ea575f91fa4a2b5fb52400c3505ac62c0a5479d772e8132e8d00000000000", 0xad6}], 0x1}}], 0x1, 0x0) [ 514.736898][T16756] binder: 16755:16756 unknown command 0 [ 514.742791][T16756] binder: 16755:16756 ioctl c0306201 20000200 returned -22 14:16:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000180)=0xe8) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r4, 0x400454ce, r5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}) fchownat(r2, &(0x7f0000000040)='./file0\x00', r3, r5, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r6, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x800000000000401) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r3}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={r3, 0x7f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x1000, 0x3}, &(0x7f00000001c0)=0x8) getsockopt(r0, 0x1, 0x8b, &(0x7f0000000040)=""/112, &(0x7f00000000c0)=0x70) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r4, &(0x7f0000000900)) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r6 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101001, 0x0) migrate_pages(r6, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 514.883318][ C1] sd 0:0:1:0: [sg0] tag#938 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 514.893852][ C1] sd 0:0:1:0: [sg0] tag#938 CDB: Test Unit Ready [ 514.900469][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.910248][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.920077][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.929992][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.939782][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.949594][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.959296][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.969071][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.978856][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.988656][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 514.998433][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.008216][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.017998][ C1] sd 0:0:1:0: [sg0] tag#938 CDB[c0]: 00 00 00 00 00 00 00 00 [ 515.062523][T16764] input: syz1 as /devices/virtual/input/input220 14:16:27 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 515.396815][T16795] binder: 16794:16795 unknown command 25348 [ 515.402989][T16795] binder: 16794:16795 ioctl c0306201 20000200 returned -22 14:16:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:27 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f0000000040)=0xf18001, 0xeefffdef) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:16:28 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 516.404783][ C1] sd 0:0:1:0: [sg0] tag#898 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 516.416229][ C1] sd 0:0:1:0: [sg0] tag#898 CDB: Test Unit Ready [ 516.422979][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.432750][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.442534][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.452397][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.462215][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.472018][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.481907][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.491622][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 516.501347][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.511137][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.520951][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.530732][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.540503][ C1] sd 0:0:1:0: [sg0] tag#898 CDB[c0]: 00 00 00 00 00 00 00 00 [ 516.557721][T16828] binder: 16827:16828 unknown command 25348 [ 516.564075][T16828] binder: 16827:16828 ioctl c0306201 20000200 returned -22 [ 516.564395][T16824] input: syz1 as /devices/virtual/input/input221 14:16:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 516.904110][T16842] binder: 16841:16842 unknown command 25348 [ 516.910250][T16842] binder: 16841:16842 ioctl c0306201 20000200 returned -22 14:16:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:29 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) 14:16:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(r3) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010102, @multicast1}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 517.343612][T16853] binder: 16851:16853 unknown command 287492 [ 517.349964][T16853] binder: 16851:16853 ioctl c0306201 20000200 returned -22 [ 517.395922][ C1] sd 0:0:1:0: [sg0] tag#918 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 517.406783][ C1] sd 0:0:1:0: [sg0] tag#918 CDB: Test Unit Ready [ 517.413526][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.423270][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.433015][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.442784][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.452524][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.462256][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.471998][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.481671][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 517.491417][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.501164][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.510900][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.520723][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.530542][ C1] sd 0:0:1:0: [sg0] tag#918 CDB[c0]: 00 00 00 00 00 00 00 00 [ 517.572072][T16855] input: syz1 as /devices/virtual/input/input222 14:16:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x400017e) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xd0000200) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) r3 = open(0x0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000), 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f0000000480), 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[]}}, 0x40010) dup3(r2, r0, 0x0) 14:16:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:30 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x26) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6821b8f1", @ANYRES16=r3, @ANYBLOB="200027bd7000fcdbdf250400000014000200fc0100000000000000000000000000011400060067656e657665300000000000000000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10006095}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010804}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3f, 0x240) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x1412, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f00000003c0)=""/30, 0x1e}], 0x3) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x2, 0x2) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000480)=0x8, &(0x7f00000004c0)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) migrate_pages(r5, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f00000011c0)={@void, @val={0x9, 0x0, 0x0, 0x0, 0x60}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x3a, 0x11, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "aa0e00", 0x0, 0x0, 0x0, @ipv4={[], [], @local}, @remote, [], "4011c6ed3ec831c0a859"}}}}}}, 0x6c) [ 518.409001][T16891] binder: 16885:16891 unknown command 287492 [ 518.415391][T16891] binder: 16885:16891 ioctl c0306201 20000200 returned -22 14:16:30 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd10e4b44aa0d6370b206736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08b45f1fc0e0000000007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360227ec60cb274e00da971f7ee096d74c92d44bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000000000d3b049f3fc65d6012b3c65"], 0xd3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x1f, 0x0, 0x3fc0}, 'syz1\x00', 0x30}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xc377c000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x400, {{0x2, 0x0, @local}}, 0x1, 0x5, [{{0x2, 0x4e20, @private}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x0, @dev}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x310) bind$inet(0xffffffffffffffff, 0x0, 0x0) sync() prctl$PR_GET_TIMERSLACK(0x1e) [ 518.758452][ C0] sd 0:0:1:0: [sg0] tag#936 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 518.769080][ C0] sd 0:0:1:0: [sg0] tag#936 CDB: Test Unit Ready [ 518.775821][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.785621][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.795422][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.805527][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.815359][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.825172][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.835000][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.844830][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14:16:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="3e0f0666b8ca000f00d00f01d1660f38826be8b97d0b00000f320f01c9c4c1bde969fb6a00660f38213f66b874000f00d0", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:16:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 518.854729][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.864547][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.874312][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.884125][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.893915][ C0] sd 0:0:1:0: [sg0] tag#936 CDB[c0]: 00 00 00 00 00 00 00 00 [ 518.939529][T16908] input: syz1 as /devices/virtual/input/input223 14:16:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 519.107197][T16919] binder: 16917:16919 unknown command 287492 [ 519.114365][T16919] binder: 16917:16919 ioctl c0306201 20000200 returned -22 14:16:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000040)={0x0, 0x0, 'client0\x00', 0xffffffff80000000, "1f67c29f08bbc441", "88203ed0e8f23133c2398ec60ae8332f57a4fd655131171fd4322204c7544cfa", 0x3f, 0x5e}) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:31 executing program 3: msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgrcv(0x0, &(0x7f00000002c0)={0x0, ""/217}, 0xe1, 0x0, 0x3000) [ 519.915481][T16920] debugfs: Directory '16920-4' with parent 'kvm' already present! 14:16:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:16:32 executing program 0: dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000075000/0x4000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0) 14:16:32 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000180)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:16:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:32 executing program 0: dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000075000/0x4000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0) 14:16:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:16:32 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r0, 0x6cedd1837b446d8d, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40008}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044091}, 0x39b6cc2965a8b1d5) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x287}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040080}, 0x44) r5 = socket$rds(0x15, 0x5, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r7, &(0x7f0000000900)) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x404c881) r8 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r8, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:32 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400, 0xe36f}, 0x0, 0x7fffffff, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty}}, 0x24) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) shutdown(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000d06000), 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) shutdown(r3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000240)={0x0, 'batadv0\x00', {0xf}, 0x8}) shutdown(r2, 0x1) fcntl$setpipe(r2, 0x407, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 14:16:32 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x10523) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 14:16:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:33 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:16:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@deltfilter={0x34, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x2, 'flower\x00'}, {0x4}}]}, 0x34}, 0x8}, 0x0) 14:16:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x4, 0xd, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000080)=""/13}, &(0x7f0000000140)=0x78) 14:16:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 521.985390][T17027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:16:33 executing program 0: dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000075000/0x4000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0) 14:16:33 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 522.115436][T17035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:16:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:34 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 14:16:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="fee90e082effdede49828f17aae509a82a116c11a0dff5cd21b7b0a819fea40739f35f4f779842e7432ef1d604b902704c043022804198da642017018f13d2d4aa3a5a0a9ecadfa5011eee512d50123c737a3cebb4079fda25f25675840e2d0df81c3ca59e1d066885953e26c8eabf3f9a764340f629cbdcdc965b2ffe5349c0f7c9bd4d9f4ae8a612724da165d187b345ee11fcd370b5d0ad5bf092ae5b4f824935e7566e520b2dae07b765df0a1ab4123a6e87df43dda810ccc3460781655769f7b75ee5d80d983db380f947e24c8290d7291edd9a442eda7c59d4665365ddfe06de17e8db443645257a27201d168d39bc792458a426e86d000515035c8eab9f32aaee8c9120df274403b1898f329b2cf5321aa08319ae6653a85cc3620149224a3fe9b16cb20ed7a2b415b556d2b593e9da611072bbe084303c9ec048598c4995da1825a76860f0615b71c28843a8bcb7ffdb1f9b3b59ae4bfc1161cfca532e5243477d420a62dcc5276878e2965bb9841070cee526687541b267fee3088f64b21ff6b4cacbb1a84f9410a0066e83203abbe900dcc6af83ea7f379954bce823c238175c20fd5213bd6450d183cda562355b671c07a0eaba844a6aecf54aab3e3c74f2c14735a885330e93e461da1016bc095fb4cade61a822cefc594d6d71f41c9f3ca6d0ca8a9ac7428da61e7b2dd557ea3f2b570efe22c3d9b29033b7eec9eec2a690b41b589c19a766dc400516cb722592efd7175433748ee313ff5eb4aadf89ca5c17081d9fed634b3623472e5b4af96a227f162d03529587a5e207b8d30d84e91ee97fe93ccd25f721d781fc5c04ac0528604450392987e49c28d24292cbbf2edafd7a85dc3e63a7f66a78f5649a63e32773102b198d6e40661ceacf4f18d3880911cd69976717b6200154549494d49f374ca42fd1bf50232473db19be7b4559b3df81c7ce713bad88ab90306260aded1efcfa23456932e95fff91c6c19fdbf985226f2580f9aa1254ac34e422817d6a1b8d24113fe1620de62e22d2d9d30aa9a99d71f1d3f6c333cee101b25f061873ac5ba077e68b5af0e8f5a1c562bcad59923685bc05d928b8bdabe8c9283775a1e96d5c2b255f5fafe841986f0e82d10b6bfc6f5508b36ed6c65f82ee8bd4fd6664a046e299f9c2c99f9b0146353962e14566b55b527e79b6a5bb7040744d31dd8d44d2ede941e32853b082212e06f33997493f6b953cdb1174cfc4fe37c5e560b1f4ace0d9859a2709f8b49b3fa484154fda82e8cecea2239739d27db82979e4fbc5f1529ad305d8fe7a8d9eea6fadf947a0ad95902c3113ac671b97d0be5664f5ef393013cb839c7d52ffbf82a5a82a30295ed6e86cd1aacbf65b4a4bd210a9dfab8ae5673260a9f65d3c989641783135e73fcc60d4f2031455b2420d95bd0a866f4cf4db532e5d888bc92474981d7594aaaeb3354adc2c74b69b03fbbe24ca60332140404f4415ae075626069c2a37e91e16e25e34f24410c351ae2c18e186d5495e1877d7b0c82333d1770a2b10a4362e2ae0aadc8668e81bc8d69d20798d395464d81e2c300aea5ca9392e37f3c191a89d6e0791a8bf6958c64d945399e210ae9e72e0231fee10d2836fddc18f4178b9114ccd3cd1d14b51260fe6390ea6956607853a645548069ff1a68a3d1298cd7baf2e20bfca27af8076e9a39774d65a8bf1e6be1811ce3b7ea9ae6290ec31626f75156e77727907f648645ae689d09d4055786356ad38c7b5c6aa631f5a19bbac14214c7fe881ab4ab1d02d6ae1b07eda17108cb1f71676ef6e70be52ee71ea08371b661701b60918bc2c8521863c718ecdf41c67343c2c067d5da3d6b8a9edd059a139eb6299c1e2ec79a8840746c40d3055c4c142d97232952b8136c18a23473a320e3b0b7faa24e5307d239fbd00d7a6116c04cd6f5e89e02b934a790cc4be106ab247e5edb5d226d271a4d9dc2feed4c3ce6740900101c8d4d0655e04df8003a7264ff9e54e93c10f43db27f3e2be9cab459005706c4c975c49481a540c4bc15a03b41afa0376e066f3bc1ba0dc9f68997003e81dd732a2a5f096d00b2099f786229a2a859e007ce17348f19e250e504e9b099e7c71bb918808defbd9aa1f282346067a457199337ed4dc0355dfacfeaef55257e7fb39e99c3fdb6428502b6fa73dbec4a47e92873f2f15b7e46124384be7e9b37f0908d73ed22d4cb665d065b660ee11ff328750c92fb380975478b5c0d39a9558f6fe7b82ba20b53d2d04da9029b6c4562f2475a2c03f4148fa6f3c16853c99930a73495ac99a983368ae8adb5b49304125f98cdce9b715da3fe5ff51b9f75c93f50cf92d6f9bdbc2fb45d032f8c1ab515353b0f4ecb1eb344e3d987b7ed7171d191f0acc3b547f5e220d9f4687ccf8ed8b3523347cc2d653a87124e08733be0457adb00e9de67ead487a0e702a18c352769e8036f88979e0babe0cd8a942883b58216f5aa2038a6a58375a1e8b6cdae9cd98cb77c11784913fb2a463889c4f80e4623fbdbce774d1d18eda1f6ec079066772238c33b4b1bfb441112ec04f8c00222740ead01c471953d63aa6c25a63ba75516c32245bfee9f7ba49c90d0e26d9b5f932b3e88acc3b446999023fbc1b41a3a8cea9ed9cd034174414664221cc3a469e9534f5afb02c50318ba22d87f2a2acc6a0cf7b4fd709c236a2a74290865c47a3572fb3a16002ab9987383d1c901e76e185a1b177e1a0d02b9b94f43a9b1e84e97e322bae3c0e7c8870a6b68956c141fe5087efda117f36c81e0c4b543b57766c61b67ff6cf9a12b9dbd6276c2174d77e8021b377c2ad9b1d3ddcd76ba8c5543f72509c578d5861bd663227a228d6ce1931b235caf66c29f4e2a0ae90dc473665f514c0db6c91dc010ca817a29753f7c4c8337ad887517039274a2257dd51390a17132204c0d158abc734c8ead52b009f09b432c2ba6d27a425d5af61d6d57606d975102034a80920de8fd087539872e8780790ece0ace843188f5496a3177a8d450e8452c5215f86ec522407c64acccddec449ad931150887d728ce006fbaa840572fdc8063dda28ec0396548fb8e4986c86e33439b57a60595ad3d274871cf16440c267b40ea4aabcc44bb891ca42f98c3e716cf7367eb89ff5e3501d61358b581922870d7a2ec1a47a567c96615103484a6e94d00f80110b95ce83001680d0abf0bc8e39bdf26b50369e82bcfc1804335f02888cdb96f938e5093ebf41f6d8e56c06b5291979c93b696ca77e687d5a9971d7962f150200e193dcd5a7ee01a8d36619f885d0cb7fa95263e6a954efb940109c9ce57a906483717650252d4d70faabb7bc2d13a482c3b0418a4ba46e417e9b8d94b1745aae83662c200838fab2a634ee05bdb13ac362874fce9d0b8a9d1979c23611796371b4ada2b107e9720db8aee190c6e7e78a2f3fccf09b7b4d16b62acdfbb2fdf823f2f912bd2d45b1174c5511b06f7d1e14639916ee141830eb9a52dc939bcb53b910fee618f3d769d82d81ee219847680a5bcc7dd5f2c927d55ad469f991cfb0d068e70adcd9dd04a833fceccf977ba8074a48b15fa176f805725d679e2f0ae98d00447039a040e596365f0e3f970964069fef6e60000140465fd54618355fe297d686bea8fff5d4de111968a63141cfded70800fd497f6c81c987dddca520ed085c81bd0babfe93620adc682af44637f697aa139e27f3477e222f76ae295608862271411ed1820963553e76f9258d7567569a09c373fffdc3e6200c76562eeb620d85de2d20d715a1b13c7d82086a242ba57d9777dc08887cc1eb709bfeee8b0d5fdfa1a3c51182278cc64a02a3bb1dd6b3c2816555a02d291edd41f15c58c137a4b830ba068ea575f91fa4a2b5fb52400c3505ac62c0a5479d772e8132e8d0e5", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:16:34 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0605345, &(0x7f0000000580)={{}, 'port1\x00'}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 14:16:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) 14:16:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="fee90e082effdede49828f17aae509a82a116c11a0dff5cd21b7b0a819fea40739f35f4f779842e7432ef1d604b902704c043022804198da642017018f13d2d4aa3a5a0a9ecadfa5011eee512d50123c737a3cebb4079fda25f25675840e2d0df81c3ca59e1d066885953e26c8eabf3f9a764340f629cbdcdc965b2ffe5349c0f7c9bd4d9f4ae8a612724da165d187b345ee11fcd370b5d0ad5bf092ae5b4f824935e7566e520b2dae07b765df0a1ab4123a6e87df43dda810ccc3460781655769f7b75ee5d80d983db380f947e24c8290d7291edd9a442eda7c59d4665365ddfe06de17e8db443645257a27201d168d39bc792458a426e86d000515035c8eab9f32aaee8c9120df274403b1898f329b2cf5321aa08319ae6653a85cc3620149224a3fe9b16cb20ed7a2b415b556d2b593e9da611072bbe084303c9ec048598c4995da1825a76860f0615b71c28843a8bcb7ffdb1f9b3b59ae4bfc1161cfca532e5243477d420a62dcc5276878e2965bb9841070cee526687541b267fee3088f64b21ff6b4cacbb1a84f9410a0066e83203abbe900dcc6af83ea7f379954bce823c238175c20fd5213bd6450d183cda562355b671c07a0eaba844a6aecf54aab3e3c74f2c14735a885330e93e461da1016bc095fb4cade61a822cefc594d6d71f41c9f3ca6d0ca8a9ac7428da61e7b2dd557ea3f2b570efe22c3d9b29033b7eec9eec2a690b41b589c19a766dc400516cb722592efd7175433748ee313ff5eb4aadf89ca5c17081d9fed634b3623472e5b4af96a227f162d03529587a5e207b8d30d84e91ee97fe93ccd25f721d781fc5c04ac0528604450392987e49c28d24292cbbf2edafd7a85dc3e63a7f66a78f5649a63e32773102b198d6e40661ceacf4f18d3880911cd69976717b6200154549494d49f374ca42fd1bf50232473db19be7b4559b3df81c7ce713bad88ab90306260aded1efcfa23456932e95fff91c6c19fdbf985226f2580f9aa1254ac34e422817d6a1b8d24113fe1620de62e22d2d9d30aa9a99d71f1d3f6c333cee101b25f061873ac5ba077e68b5af0e8f5a1c562bcad59923685bc05d928b8bdabe8c9283775a1e96d5c2b255f5fafe841986f0e82d10b6bfc6f5508b36ed6c65f82ee8bd4fd6664a046e299f9c2c99f9b0146353962e14566b55b527e79b6a5bb7040744d31dd8d44d2ede941e32853b082212e06f33997493f6b953cdb1174cfc4fe37c5e560b1f4ace0d9859a2709f8b49b3fa484154fda82e8cecea2239739d27db82979e4fbc5f1529ad305d8fe7a8d9eea6fadf947a0ad95902c3113ac671b97d0be5664f5ef393013cb839c7d52ffbf82a5a82a30295ed6e86cd1aacbf65b4a4bd210a9dfab8ae5673260a9f65d3c989641783135e73fcc60d4f2031455b2420d95bd0a866f4cf4db532e5d888bc92474981d7594aaaeb3354adc2c74b69b03fbbe24ca60332140404f4415ae075626069c2a37e91e16e25e34f24410c351ae2c18e186d5495e1877d7b0c82333d1770a2b10a4362e2ae0aadc8668e81bc8d69d20798d395464d81e2c300aea5ca9392e37f3c191a89d6e0791a8bf6958c64d945399e210ae9e72e0231fee10d2836fddc18f4178b9114ccd3cd1d14b51260fe6390ea6956607853a645548069ff1a68a3d1298cd7baf2e20bfca27af8076e9a39774d65a8bf1e6be1811ce3b7ea9ae6290ec31626f75156e77727907f648645ae689d09d4055786356ad38c7b5c6aa631f5a19bbac14214c7fe881ab4ab1d02d6ae1b07eda17108cb1f71676ef6e70be52ee71ea08371b661701b60918bc2c8521863c718ecdf41c67343c2c067d5da3d6b8a9edd059a139eb6299c1e2ec79a8840746c40d3055c4c142d97232952b8136c18a23473a320e3b0b7faa24e5307d239fbd00d7a6116c04cd6f5e89e02b934a790cc4be106ab247e5edb5d226d271a4d9dc2feed4c3ce6740900101c8d4d0655e04df8003a7264ff9e54e93c10f43db27f3e2be9cab459005706c4c975c49481a540c4bc15a03b41afa0376e066f3bc1ba0dc9f68997003e81dd732a2a5f096d00b2099f786229a2a859e007ce17348f19e250e504e9b099e7c71bb918808defbd9aa1f282346067a457199337ed4dc0355dfacfeaef55257e7fb39e99c3fdb6428502b6fa73dbec4a47e92873f2f15b7e46124384be7e9b37f0908d73ed22d4cb665d065b660ee11ff328750c92fb380975478b5c0d39a9558f6fe7b82ba20b53d2d04da9029b6c4562f2475a2c03f4148fa6f3c16853c99930a73495ac99a983368ae8adb5b49304125f98cdce9b715da3fe5ff51b9f75c93f50cf92d6f9bdbc2fb45d032f8c1ab515353b0f4ecb1eb344e3d987b7ed7171d191f0acc3b547f5e220d9f4687ccf8ed8b3523347cc2d653a87124e08733be0457adb00e9de67ead487a0e702a18c352769e8036f88979e0babe0cd8a942883b58216f5aa2038a6a58375a1e8b6cdae9cd98cb77c11784913fb2a463889c4f80e4623fbdbce774d1d18eda1f6ec079066772238c33b4b1bfb441112ec04f8c00222740ead01c471953d63aa6c25a63ba75516c32245bfee9f7ba49c90d0e26d9b5f932b3e88acc3b446999023fbc1b41a3a8cea9ed9cd034174414664221cc3a469e9534f5afb02c50318ba22d87f2a2acc6a0cf7b4fd709c236a2a74290865c47a3572fb3a16002ab9987383d1c901e76e185a1b177e1a0d02b9b94f43a9b1e84e97e322bae3c0e7c8870a6b68956c141fe5087efda117f36c81e0c4b543b57766c61b67ff6cf9a12b9dbd6276c2174d77e8021b377c2ad9b1d3ddcd76ba8c5543f72509c578d5861bd663227a228d6ce1931b235caf66c29f4e2a0ae90dc473665f514c0db6c91dc010ca817a29753f7c4c8337ad887517039274a2257dd51390a17132204c0d158abc734c8ead52b009f09b432c2ba6d27a425d5af61d6d57606d975102034a80920de8fd087539872e8780790ece0ace843188f5496a3177a8d450e8452c5215f86ec522407c64acccddec449ad931150887d728ce006fbaa840572fdc8063dda28ec0396548fb8e4986c86e33439b57a60595ad3d274871cf16440c267b40ea4aabcc44bb891ca42f98c3e716cf7367eb89ff5e3501d61358b581922870d7a2ec1a47a567c96615103484a6e94d00f80110b95ce83001680d0abf0bc8e39bdf26b50369e82bcfc1804335f02888cdb96f938e5093ebf41f6d8e56c06b5291979c93b696ca77e687d5a9971d7962f150200e193dcd5a7ee01a8d36619f885d0cb7fa95263e6a954efb940109c9ce57a906483717650252d4d70faabb7bc2d13a482c3b0418a4ba46e417e9b8d94b1745aae83662c200838fab2a634ee05bdb13ac362874fce9d0b8a9d1979c23611796371b4ada2b107e9720db8aee190c6e7e78a2f3fccf09b7b4d16b62acdfbb2fdf823f2f912bd2d45b1174c5511b06f7d1e14639916ee141830eb9a52dc939bcb53b910fee618f3d769d82d81ee219847680a5bcc7dd5f2c927d55ad469f991cfb0d068e70adcd9dd04a833fceccf977ba8074a48b15fa176f805725d679e2f0ae98d00447039a040e596365f0e3f970964069fef6e60000140465fd54618355fe297d686bea8fff5d4de111968a63141cfded70800fd497f6c81c987dddca520ed085c81bd0babfe93620adc682af44637f697aa139e27f3477e222f76ae295608862271411ed1820963553e76f9258d7567569a09c373fffdc3e6200c76562eeb620d85de2d20d715a1b13c7d82086a242ba57d9777dc08887cc1eb709bfeee8b0d5fdfa1a3c51182278cc64a02a3bb1dd6b3c2816555a02d291edd41f15c58c137a4b830ba068ea575f91fa4a2b5fb52400c3505ac62c0a5479d772e8132e8d0e5", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:16:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 523.336216][T17087] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:16:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:16:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 14:16:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 14:16:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'bond0\x00', {}, 0x3}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="d44359d8dfe425997553ccc17560b1ad63ee5a1eacaf6d863e4cbe5fe9eeafaa0f5a3de720d8adfd1a0143769e6b36978da993c84df906c5ee6547ccea56b5929fd8127caba0dfb6531136c193c27c3c0029fe1e", 0x54}, {&(0x7f00000001c0)="4ef4576da1eb681ffdfe01988ad3a4e13e8cecaf0a69288c893a", 0x1a}, {&(0x7f0000000200)="14c5b87441308a03037000510183a33f1db1b22302743fc9966e57c910921263a4dcd31d17ad469f40450688c5ce6486e2687a8dc7fa3cbc6c0a6c6620ea397cc7706476ac996bd9ebea76e45dec70089288821a2cc943a0d63f3259c89bc2bdf39074b805e8cc49def268bdeb2a6819cdefe73fc9b9e8ebc1dc10c7ca8bfd406d58a52c233f60a6fda46f799645fa4df7a103e0fd2325008fbf4c8fb47b54d5af3bacd1469da1170a4743ed09403053f36293a97014f895cb8a1979b08157e307131debbe", 0xc5}], 0x3}, 0x40) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:36 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x204006, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) [ 524.556731][T17132] binder: 17129:17132 ioctl c0306201 0 returned -14 14:16:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:36 executing program 0: r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 14:16:36 executing program 3: syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 14:16:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:16:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) [ 525.279151][T17155] binder: 17153:17155 ioctl c0306201 0 returned -14 14:16:37 executing program 3: r0 = memfd_create(&(0x7f0000000100)='systemem0md5sum$\x00', 0x0) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/123, 0x7ffff000}], 0x27a, &(0x7f0000002f80)=[{&(0x7f0000000c00)=""/215, 0x7ffff000}], 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 14:16:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) gettid() r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x6a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000000) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r4, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:16:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) [ 525.767549][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 525.990109][T17175] binder: 17173:17175 ioctl c0306201 0 returned -14 14:16:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) 14:16:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r5, &(0x7f0000000900)) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000180)={0x1, 0x3, 0x5, 0x0, 0x0, [{{r1}, 0x7fff}, {{r1}, 0x7}, {{r3}, 0x80000001}, {{r4}}, {{r5}, 0x3ff}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r6 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) migrate_pages(r6, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) 14:16:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:16:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:39 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) socket$inet6(0xa, 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='ext4\x00', 0x0, 0x0) 14:16:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) 14:16:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:40 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) 14:16:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:40 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010102, @multicast1, r5}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x800000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:16:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 528.614954][T17247] kvm [17243]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000000d [ 528.683481][T17247] kvm [17243]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000019 [ 528.737220][T17247] kvm [17243]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000031 14:16:40 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) [ 528.795299][T17247] kvm [17243]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000075 14:16:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:16:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private1}) 14:16:41 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) 14:16:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r3, &(0x7f0000000900)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400608ce37411ecc8fcb27c142becac293a6b5a336ac5d10dbf00009615fac86e377d0c3b93c998df89fb4bca746c09d3873f0686938d6ef8eb4902add65312aed4d064a838f01c45745ff29330da492eafaf71ca6a320e446618b500dd5a66106d0432d51c4433cd499cf4253d99cddf8354d698fc82f552e2286388d60b90eaad76d184a869933ac59d2cac990946f89d8a1f77d3fb461a34b9b13d635b939035184d9cd98a7c4c62cab96735b33ed1b32b23d060141015c93b1e5a6137ee9de98e77c5d97c7ea86d7a6f51ae06f2aebde6f1e8b5287025352ddeb8befc945597a811e8b6", @ANYRES16=r5, @ANYBLOB="000826bd7000fddbdf250800000008000c000300000008000c000000000014000500fe8000000000000000000000000000aa06000b0027000000"], 0x40}, 0x1, 0x0, 0x0, 0x2000c011}, 0x24000040) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc}, 0x81) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:41 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) 14:16:41 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) 14:16:42 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) 14:16:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c03, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "b04a83706694a75154c629f35b71a95a8f04000000000000002d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9fcaf69ec0e43", "d66ee438c05a45ff21d756bd900300000000000000a482ebf7a08c305bee6fd6"}) 14:16:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:16:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x2400) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r3 = clone3(&(0x7f0000001680)={0x100100, 0x0, 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x20}, 0x1, 0x0, 0x0, 0x24064804}, 0x440e0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/current\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000000900)) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/udmabuf\x00', 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r7, &(0x7f0000000900)) fstat(r7, &(0x7f00000003c0)) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2080}, 0x2000c0c0) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) fstat(0xffffffffffffffff, &(0x7f0000000900)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)=[@increfs, @decrefs={0x40046307, 0x1}, @register_looper], 0xef, 0x0, &(0x7f0000000440)="a8f34e68120519a74c5a7dfb0b8899a30af8dfec4ed91b9585f5ff6cd1a704e3e1df5d6a7571f82621222768bb652420a3e7075e5723ba7c2c2e7762373794d2510fc05ba6ad391ba9495f238ae5c3949b0ec63cd4e6a46b26ee75a6401cf8c498232413c512cef2dabbb10e698589247c5967c8ad4a1220c190f8354cab19e3054db2da308db4129cd27969449e87608c676e5195f85133e1ea0512b46f47ff4a0c716cc235273e7eaf74b90ea67fb7838c2f8c8ecf2653ce7384867418c962afc0f0a5c472da24ab315e7503238e0cb3d3cef828894a24de6b22adb18452192bc7d88a6b7dbe099f7eed02d60c99"}) 14:16:42 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="080002002f8d"], 0x40}}, 0x0) 14:16:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005640)="7a13fd9b7703cdde13627b3c9ed47b49381dcdb9147747c5d1daa88df01086dc6efedaa68f797bc1537977b723b18fda69f000555b0e0bcb8a7f34522e3b48682ac71b07385fcaa296cdeabd5e867c0c23bab3df78a5948cfe705b5f462c5ea274837b8299417e18c0bd7720001dbcccb5fc0c44e7ebea028ec2c586f3ff534ed02bebdeeb4695ddfacb", 0x8a}, {&(0x7f0000005700)="1aabee49d2eb6978cc0e938df45ca09da534d8818739156bceaaf607abc453f0007087b76733e56c81060bdc4fccaac4f798c7e3a0425489c021718dcb19c2", 0x3f}], 0x2}}], 0x1, 0x0) shutdown(r0, 0x1) 14:16:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="fee90e082effdede49828f17aae509a82a116c11a0dff5cd21b7b0a819fea40739f35f4f779842e7432ef1d604b902704c043022804198da642017018f13d2d4aa3a5a0a9ecadfa5011eee512d50123c737a3cebb4079fda25f25675840e2d0df81c3ca59e1d066885953e26c8eabf3f9a764340f629cbdcdc965b2ffe5349c0f7c9bd4d9f4ae8a612724da165d187b345ee11fcd370b5d0ad5bf092ae5b4f824935e7566e520b2dae07b765df0a1ab4123a6e87df43dda810ccc3460781655769f7b75ee5d80d983db380f947e24c8290d7291edd9a442eda7c59d4665365ddfe06de17e8db443645257a27201d168d39bc792458a426e86d000515035c8eab9f32aaee8c9120df274403b1898f329b2cf5321aa08319ae6653a85cc3620149224a3fe9b16cb20ed7a2b415b556d2b593e9da611072bbe084303c9ec048598c4995da1825a76860f0615b71c28843a8bcb7ffdb1f9b3b59ae4bfc1161cfca532e5243477d420a62dcc5276878e2965bb9841070cee526687541b267fee3088f64b21ff6b4cacbb1a84f9410a0066e83203abbe900dcc6af83ea7f379954bce823c238175c20fd5213bd6450d183cda562355b671c07a0eaba844a6aecf54aab3e3c74f2c14735a885330e93e461da1016bc095fb4cade61a822cefc594d6d71f41c9f3ca6d0ca8a9ac7428da61e7b2dd557ea3f2b570efe22c3d9b29033b7eec9eec2a690b41b589c19a766dc400516cb722592efd7175433748ee313ff5eb4aadf89ca5c17081d9fed634b3623472e5b4af96a227f162d03529587a5e207b8d30d84e91ee97fe93ccd25f721d781fc5c04ac0528604450392987e49c28d24292cbbf2edafd7a85dc3e63a7f66a78f5649a63e32773102b198d6e40661ceacf4f18d3880911cd69976717b6200154549494d49f374ca42fd1bf50232473db19be7b4559b3df81c7ce713bad88ab90306260aded1efcfa23456932e95fff91c6c19fdbf985226f2580f9aa1254ac34e422817d6a1b8d24113fe1620de62e22d2d9d30aa9a99d71f1d3f6c333cee101b25f061873ac5ba077e68b5af0e8f5a1c562bcad59923685bc05d928b8bdabe8c9283775a1e96d5c2b255f5fafe841986f0e82d10b6bfc6f5508b36ed6c65f82ee8bd4fd6664a046e299f9c2c99f9b0146353962e14566b55b527e79b6a5bb7040744d31dd8d44d2ede941e32853b082212e06f33997493f6b953cdb1174cfc4fe37c5e560b1f4ace0d9859a2709f8b49b3fa484154fda82e8cecea2239739d27db82979e4fbc5f1529ad305d8fe7a8d9eea6fadf947a0ad95902c3113ac671b97d0be5664f5ef393013cb839c7d52ffbf82a5a82a30295ed6e86cd1aacbf65b4a4bd210a9dfab8ae5673260a9f65d3c989641783135e73fcc60d4f2031455b2420d95bd0a866f4cf4db532e5d888bc92474981d7594aaaeb3354adc2c74b69b03fbbe24ca60332140404f4415ae075626069c2a37e91e16e25e34f24410c351ae2c18e186d5495e1877d7b0c82333d1770a2b10a4362e2ae0aadc8668e81bc8d69d20798d395464d81e2c300aea5ca9392e37f3c191a89d6e0791a8bf6958c64d945399e210ae9e72e0231fee10d2836fddc18f4178b9114ccd3cd1d14b51260fe6390ea6956607853a645548069ff1a68a3d1298cd7baf2e20bfca27af8076e9a39774d65a8bf1e6be1811ce3b7ea9ae6290ec31626f75156e77727907f648645ae689d09d4055786356ad38c7b5c6aa631f5a19bbac14214c7fe881ab4ab1d02d6ae1b07eda17108cb1f71676ef6e70be52ee71ea08371b661701b60918bc2c8521863c718ecdf41c67343c2c067d5da3d6b8a9edd059a139eb6299c1e2ec79a8840746c40d3055c4c142d97232952b8136c18a23473a320e3b0b7faa24e5307d239fbd00d7a6116c04cd6f5e89e02b934a790cc4be106ab247e5edb5d226d271a4d9dc2feed4c3ce6740900101c8d4d0655e04df8003a7264ff9e54e93c10f43db27f3e2be9cab459005706c4c975c49481a540c4bc15a03b41afa0376e066f3bc1ba0dc9f68997003e81dd732a2a5f096d00b2099f786229a2a859e007ce17348f19e250e504e9b099e7c71bb918808defbd9aa1f282346067a457199337ed4dc0355dfacfeaef55257e7fb39e99c3fdb6428502b6fa73dbec4a47e92873f2f15b7e46124384be7e9b37f0908d73ed22d4cb665d065b660ee11ff328750c92fb380975478b5c0d39a9558f6fe7b82ba20b53d2d04da9029b6c4562f2475a2c03f4148fa6f3c16853c99930a73495ac99a983368ae8adb5b49304125f98cdce9b715da3fe5ff51b9f75c93f50cf92d6f9bdbc2fb45d032f8c1ab515353b0f4ecb1eb344e3d987b7ed7171d191f0acc3b547f5e220d9f4687ccf8ed8b3523347cc2d653a87124e08733be0457adb00e9de67ead487a0e702a18c352769e8036f88979e0babe0cd8a942883b58216f5aa2038a6a58375a1e8b6cdae9cd98cb77c11784913fb2a463889c4f80e4623fbdbce774d1d18eda1f6ec079066772238c33b4b1bfb441112ec04f8c00222740ead01c471953d63aa6c25a63ba75516c32245bfee9f7ba49c90d0e26d9b5f932b3e88acc3b446999023fbc1b41a3a8cea9ed9cd034174414664221cc3a469e9534f5afb02c50318ba22d87f2a2acc6a0cf7b4fd709c236a2a74290865c47a3572fb3a16002ab9987383d1c901e76e185a1b177e1a0d02b9b94f43a9b1e84e97e322bae3c0e7c8870a6b68956c141fe5087efda117f36c81e0c4b543b57766c61b67ff6cf9a12b9dbd6276c2174d77e8021b377c2ad9b1d3ddcd76ba8c5543f72509c578d5861bd663227a228d6ce1931b235caf66c29f4e2a0ae90dc473665f514c0db6c91dc010ca817a29753f7c4c8337ad887517039274a2257dd51390a17132204c0d158abc734c8ead52b009f09b432c2ba6d27a425d5af61d6d57606d975102034a80920de8fd087539872e8780790ece0ace843188f5496a3177a8d450e8452c5215f86ec522407c64acccddec449ad931150887d728ce006fbaa840572fdc8063dda28ec0396548fb8e4986c86e33439b57a60595ad3d274871cf16440c267b40ea4aabcc44bb891ca42f98c3e716cf7367eb89ff5e3501d61358b581922870d7a2ec1a47a567c96615103484a6e94d00f80110b95ce83001680d0abf0bc8e39bdf26b50369e82bcfc1804335f02888cdb96f938e5093ebf41f6d8e56c06b5291979c93b696ca77e687d5a9971d7962f150200e193dcd5a7ee01a8d36619f885d0cb7fa95263e6a954efb940109c9ce57a906483717650252d4d70faabb7bc2d13a482c3b0418a4ba46e417e9b8d94b1745aae83662c200838fab2a634ee05bdb13ac362874fce9d0b8a9d1979c23611796371b4ada2b107e9720db8aee190c6e7e78a2f3fccf09b7b4d16b62acdfbb2fdf823f2f912bd2d45b1174c5511b06f7d1e14639916ee141830eb9a52dc939bcb53b910fee618f3d769d82d81ee219847680a5bcc7dd5f2c927d55ad469f991cfb0d068e70adcd9dd04a833fceccf977ba8074a48b15fa176f805725d679e2f0ae98d00447039a040e596365f0e3f970964069fef6e60000140465fd54618355fe297d686bea8fff5d4de111968a63141cfded70800fd497f6c81c987dddca520ed085c81bd0babfe93620adc682af44637f697aa139e27f3477e222f76ae295608862271411ed1820963553e76f9258d7567569a09c373fffdc3e6200c76562eeb620d85de2d20d715a1b13c7d82086a242ba57d9777dc08887cc1eb709bfeee8b0d5fdfa1a3c51182278cc64a02a3bb1dd6b3c2816555a02d291edd41f15c58c137a4b830ba068ea575f91fa4a2b5fb52400c3505ac62c0a5479d772e8132e8d0e5", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:16:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14:16:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) getrlimit(0x2, &(0x7f0000000040)) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = clone3(&(0x7f0000001680)={0x1004000, 0x0, 0x0, 0x0, {0xfffffffb}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r4, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) tgkill(r3, r4, 0x26) 14:16:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14:16:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x6) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x10000000}) 14:16:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="fee90e082effdede49828f17aae509a82a116c11a0dff5cd21b7b0a819fea40739f35f4f779842e7432ef1d604b902704c043022804198da642017018f13d2d4aa3a5a0a9ecadfa5011eee512d50123c737a3cebb4079fda25f25675840e2d0df81c3ca59e1d066885953e26c8eabf3f9a764340f629cbdcdc965b2ffe5349c0f7c9bd4d9f4ae8a612724da165d187b345ee11fcd370b5d0ad5bf092ae5b4f824935e7566e520b2dae07b765df0a1ab4123a6e87df43dda810ccc3460781655769f7b75ee5d80d983db380f947e24c8290d7291edd9a442eda7c59d4665365ddfe06de17e8db443645257a27201d168d39bc792458a426e86d000515035c8eab9f32aaee8c9120df274403b1898f329b2cf5321aa08319ae6653a85cc3620149224a3fe9b16cb20ed7a2b415b556d2b593e9da611072bbe084303c9ec048598c4995da1825a76860f0615b71c28843a8bcb7ffdb1f9b3b59ae4bfc1161cfca532e5243477d420a62dcc5276878e2965bb9841070cee526687541b267fee3088f64b21ff6b4cacbb1a84f9410a0066e83203abbe900dcc6af83ea7f379954bce823c238175c20fd5213bd6450d183cda562355b671c07a0eaba844a6aecf54aab3e3c74f2c14735a885330e93e461da1016bc095fb4cade61a822cefc594d6d71f41c9f3ca6d0ca8a9ac7428da61e7b2dd557ea3f2b570efe22c3d9b29033b7eec9eec2a690b41b589c19a766dc400516cb722592efd7175433748ee313ff5eb4aadf89ca5c17081d9fed634b3623472e5b4af96a227f162d03529587a5e207b8d30d84e91ee97fe93ccd25f721d781fc5c04ac0528604450392987e49c28d24292cbbf2edafd7a85dc3e63a7f66a78f5649a63e32773102b198d6e40661ceacf4f18d3880911cd69976717b6200154549494d49f374ca42fd1bf50232473db19be7b4559b3df81c7ce713bad88ab90306260aded1efcfa23456932e95fff91c6c19fdbf985226f2580f9aa1254ac34e422817d6a1b8d24113fe1620de62e22d2d9d30aa9a99d71f1d3f6c333cee101b25f061873ac5ba077e68b5af0e8f5a1c562bcad59923685bc05d928b8bdabe8c9283775a1e96d5c2b255f5fafe841986f0e82d10b6bfc6f5508b36ed6c65f82ee8bd4fd6664a046e299f9c2c99f9b0146353962e14566b55b527e79b6a5bb7040744d31dd8d44d2ede941e32853b082212e06f33997493f6b953cdb1174cfc4fe37c5e560b1f4ace0d9859a2709f8b49b3fa484154fda82e8cecea2239739d27db82979e4fbc5f1529ad305d8fe7a8d9eea6fadf947a0ad95902c3113ac671b97d0be5664f5ef393013cb839c7d52ffbf82a5a82a30295ed6e86cd1aacbf65b4a4bd210a9dfab8ae5673260a9f65d3c989641783135e73fcc60d4f2031455b2420d95bd0a866f4cf4db532e5d888bc92474981d7594aaaeb3354adc2c74b69b03fbbe24ca60332140404f4415ae075626069c2a37e91e16e25e34f24410c351ae2c18e186d5495e1877d7b0c82333d1770a2b10a4362e2ae0aadc8668e81bc8d69d20798d395464d81e2c300aea5ca9392e37f3c191a89d6e0791a8bf6958c64d945399e210ae9e72e0231fee10d2836fddc18f4178b9114ccd3cd1d14b51260fe6390ea6956607853a645548069ff1a68a3d1298cd7baf2e20bfca27af8076e9a39774d65a8bf1e6be1811ce3b7ea9ae6290ec31626f75156e77727907f648645ae689d09d4055786356ad38c7b5c6aa631f5a19bbac14214c7fe881ab4ab1d02d6ae1b07eda17108cb1f71676ef6e70be52ee71ea08371b661701b60918bc2c8521863c718ecdf41c67343c2c067d5da3d6b8a9edd059a139eb6299c1e2ec79a8840746c40d3055c4c142d97232952b8136c18a23473a320e3b0b7faa24e5307d239fbd00d7a6116c04cd6f5e89e02b934a790cc4be106ab247e5edb5d226d271a4d9dc2feed4c3ce6740900101c8d4d0655e04df8003a7264ff9e54e93c10f43db27f3e2be9cab459005706c4c975c49481a540c4bc15a03b41afa0376e066f3bc1ba0dc9f68997003e81dd732a2a5f096d00b2099f786229a2a859e007ce17348f19e250e504e9b099e7c71bb918808defbd9aa1f282346067a457199337ed4dc0355dfacfeaef55257e7fb39e99c3fdb6428502b6fa73dbec4a47e92873f2f15b7e46124384be7e9b37f0908d73ed22d4cb665d065b660ee11ff328750c92fb380975478b5c0d39a9558f6fe7b82ba20b53d2d04da9029b6c4562f2475a2c03f4148fa6f3c16853c99930a73495ac99a983368ae8adb5b49304125f98cdce9b715da3fe5ff51b9f75c93f50cf92d6f9bdbc2fb45d032f8c1ab515353b0f4ecb1eb344e3d987b7ed7171d191f0acc3b547f5e220d9f4687ccf8ed8b3523347cc2d653a87124e08733be0457adb00e9de67ead487a0e702a18c352769e8036f88979e0babe0cd8a942883b58216f5aa2038a6a58375a1e8b6cdae9cd98cb77c11784913fb2a463889c4f80e4623fbdbce774d1d18eda1f6ec079066772238c33b4b1bfb441112ec04f8c00222740ead01c471953d63aa6c25a63ba75516c32245bfee9f7ba49c90d0e26d9b5f932b3e88acc3b446999023fbc1b41a3a8cea9ed9cd034174414664221cc3a469e9534f5afb02c50318ba22d87f2a2acc6a0cf7b4fd709c236a2a74290865c47a3572fb3a16002ab9987383d1c901e76e185a1b177e1a0d02b9b94f43a9b1e84e97e322bae3c0e7c8870a6b68956c141fe5087efda117f36c81e0c4b543b57766c61b67ff6cf9a12b9dbd6276c2174d77e8021b377c2ad9b1d3ddcd76ba8c5543f72509c578d5861bd663227a228d6ce1931b235caf66c29f4e2a0ae90dc473665f514c0db6c91dc010ca817a29753f7c4c8337ad887517039274a2257dd51390a17132204c0d158abc734c8ead52b009f09b432c2ba6d27a425d5af61d6d57606d975102034a80920de8fd087539872e8780790ece0ace843188f5496a3177a8d450e8452c5215f86ec522407c64acccddec449ad931150887d728ce006fbaa840572fdc8063dda28ec0396548fb8e4986c86e33439b57a60595ad3d274871cf16440c267b40ea4aabcc44bb891ca42f98c3e716cf7367eb89ff5e3501d61358b581922870d7a2ec1a47a567c96615103484a6e94d00f80110b95ce83001680d0abf0bc8e39bdf26b50369e82bcfc1804335f02888cdb96f938e5093ebf41f6d8e56c06b5291979c93b696ca77e687d5a9971d7962f150200e193dcd5a7ee01a8d36619f885d0cb7fa95263e6a954efb940109c9ce57a906483717650252d4d70faabb7bc2d13a482c3b0418a4ba46e417e9b8d94b1745aae83662c200838fab2a634ee05bdb13ac362874fce9d0b8a9d1979c23611796371b4ada2b107e9720db8aee190c6e7e78a2f3fccf09b7b4d16b62acdfbb2fdf823f2f912bd2d45b1174c5511b06f7d1e14639916ee141830eb9a52dc939bcb53b910fee618f3d769d82d81ee219847680a5bcc7dd5f2c927d55ad469f991cfb0d068e70adcd9dd04a833fceccf977ba8074a48b15fa176f805725d679e2f0ae98d00447039a040e596365f0e3f970964069fef6e60000140465fd54618355fe297d686bea8fff5d4de111968a63141cfded70800fd497f6c81c987dddca520ed085c81bd0babfe93620adc682af44637f697aa139e27f3477e222f76ae295608862271411ed1820963553e76f9258d7567569a09c373fffdc3e6200c76562eeb620d85de2d20d715a1b13c7d82086a242ba57d9777dc08887cc1eb709bfeee8b0d5fdfa1a3c51182278cc64a02a3bb1dd6b3c2816555a02d291edd41f15c58c137a4b830ba068ea575f91fa4a2b5fb52400c3505ac62c0a5479d772e8132e8d0e5", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:16:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14:16:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/bsg\x00', 0x20002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0xf12c, 0xa, 0x1f, 0xc, "4eabb77b25506d90a981e92c2b19f59644c482f9b20efbe9c979d17771140239de55c7418b4b211f2e84412169e211bd97d0153cb065e1f729e91f34ca9a4948", "7da8276826d06f0c3aa6bffd9d2385f1b96a15e2e4d7c35b11e0df0f9dc13b61", [0x8, 0x200]}) fstat(r3, &(0x7f0000000900)) accept4$packet(r3, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000b40)={@dev={0xfe, 0x80, [], 0x36}, r4}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r5, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x3, 0x5}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'veth1_to_hsr\x00', {0x2, 0x4e22, @local}}) 14:16:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:16:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:16:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 14:16:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) [ 533.045898][T17405] kvm [17404]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000006 [ 533.109059][T17405] kvm [17404]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000000e 14:16:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 533.205765][T17405] kvm [17404]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000000c [ 533.267459][T17405] kvm [17404]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001c 14:16:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0xfdfdffff, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) [ 533.354594][T17405] kvm [17404]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000008b 14:16:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 533.457089][T17405] kvm [17404]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000038 14:16:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r1, &(0x7f0000000900)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xc) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r4, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) [ 533.736862][T17427] kvm_hv_get_msr: 3 callbacks suppressed [ 533.736898][T17427] kvm [17404]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000006 14:16:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 14:16:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0xfdfdffff, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 14:16:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="fee90e082effdede49828f17aae509a82a116c11a0dff5cd21b7b0a819fea40739f35f4f779842e7432ef1d604b902704c043022804198da642017018f13d2d4aa3a5a0a9ecadfa5011eee512d50123c737a3cebb4079fda25f25675840e2d0df81c3ca59e1d066885953e26c8eabf3f9a764340f629cbdcdc965b2ffe5349c0f7c9bd4d9f4ae8a612724da165d187b345ee11fcd370b5d0ad5bf092ae5b4f824935e7566e520b2dae07b765df0a1ab4123a6e87df43dda810ccc3460781655769f7b75ee5d80d983db380f947e24c8290d7291edd9a442eda7c59d4665365ddfe06de17e8db443645257a27201d168d39bc792458a426e86d000515035c8eab9f32aaee8c9120df274403b1898f329b2cf5321aa08319ae6653a85cc3620149224a3fe9b16cb20ed7a2b415b556d2b593e9da611072bbe084303c9ec048598c4995da1825a76860f0615b71c28843a8bcb7ffdb1f9b3b59ae4bfc1161cfca532e5243477d420a62dcc5276878e2965bb9841070cee526687541b267fee3088f64b21ff6b4cacbb1a84f9410a0066e83203abbe900dcc6af83ea7f379954bce823c238175c20fd5213bd6450d183cda562355b671c07a0eaba844a6aecf54aab3e3c74f2c14735a885330e93e461da1016bc095fb4cade61a822cefc594d6d71f41c9f3ca6d0ca8a9ac7428da61e7b2dd557ea3f2b570efe22c3d9b29033b7eec9eec2a690b41b589c19a766dc400516cb722592efd7175433748ee313ff5eb4aadf89ca5c17081d9fed634b3623472e5b4af96a227f162d03529587a5e207b8d30d84e91ee97fe93ccd25f721d781fc5c04ac0528604450392987e49c28d24292cbbf2edafd7a85dc3e63a7f66a78f5649a63e32773102b198d6e40661ceacf4f18d3880911cd69976717b6200154549494d49f374ca42fd1bf50232473db19be7b4559b3df81c7ce713bad88ab90306260aded1efcfa23456932e95fff91c6c19fdbf985226f2580f9aa1254ac34e422817d6a1b8d24113fe1620de62e22d2d9d30aa9a99d71f1d3f6c333cee101b25f061873ac5ba077e68b5af0e8f5a1c562bcad59923685bc05d928b8bdabe8c9283775a1e96d5c2b255f5fafe841986f0e82d10b6bfc6f5508b36ed6c65f82ee8bd4fd6664a046e299f9c2c99f9b0146353962e14566b55b527e79b6a5bb7040744d31dd8d44d2ede941e32853b082212e06f33997493f6b953cdb1174cfc4fe37c5e560b1f4ace0d9859a2709f8b49b3fa484154fda82e8cecea2239739d27db82979e4fbc5f1529ad305d8fe7a8d9eea6fadf947a0ad95902c3113ac671b97d0be5664f5ef393013cb839c7d52ffbf82a5a82a30295ed6e86cd1aacbf65b4a4bd210a9dfab8ae5673260a9f65d3c989641783135e73fcc60d4f2031455b2420d95bd0a866f4cf4db532e5d888bc92474981d7594aaaeb3354adc2c74b69b03fbbe24ca60332140404f4415ae075626069c2a37e91e16e25e34f24410c351ae2c18e186d5495e1877d7b0c82333d1770a2b10a4362e2ae0aadc8668e81bc8d69d20798d395464d81e2c300aea5ca9392e37f3c191a89d6e0791a8bf6958c64d945399e210ae9e72e0231fee10d2836fddc18f4178b9114ccd3cd1d14b51260fe6390ea6956607853a645548069ff1a68a3d1298cd7baf2e20bfca27af8076e9a39774d65a8bf1e6be1811ce3b7ea9ae6290ec31626f75156e77727907f648645ae689d09d4055786356ad38c7b5c6aa631f5a19bbac14214c7fe881ab4ab1d02d6ae1b07eda17108cb1f71676ef6e70be52ee71ea08371b661701b60918bc2c8521863c718ecdf41c67343c2c067d5da3d6b8a9edd059a139eb6299c1e2ec79a8840746c40d3055c4c142d97232952b8136c18a23473a320e3b0b7faa24e5307d239fbd00d7a6116c04cd6f5e89e02b934a790cc4be106ab247e5edb5d226d271a4d9dc2feed4c3ce6740900101c8d4d0655e04df8003a7264ff9e54e93c10f43db27f3e2be9cab459005706c4c975c49481a540c4bc15a03b41afa0376e066f3bc1ba0dc9f68997003e81dd732a2a5f096d00b2099f786229a2a859e007ce17348f19e250e504e9b099e7c71bb918808defbd9aa1f282346067a457199337ed4dc0355dfacfeaef55257e7fb39e99c3fdb6428502b6fa73dbec4a47e92873f2f15b7e46124384be7e9b37f0908d73ed22d4cb665d065b660ee11ff328750c92fb380975478b5c0d39a9558f6fe7b82ba20b53d2d04da9029b6c4562f2475a2c03f4148fa6f3c16853c99930a73495ac99a983368ae8adb5b49304125f98cdce9b715da3fe5ff51b9f75c93f50cf92d6f9bdbc2fb45d032f8c1ab515353b0f4ecb1eb344e3d987b7ed7171d191f0acc3b547f5e220d9f4687ccf8ed8b3523347cc2d653a87124e08733be0457adb00e9de67ead487a0e702a18c352769e8036f88979e0babe0cd8a942883b58216f5aa2038a6a58375a1e8b6cdae9cd98cb77c11784913fb2a463889c4f80e4623fbdbce774d1d18eda1f6ec079066772238c33b4b1bfb441112ec04f8c00222740ead01c471953d63aa6c25a63ba75516c32245bfee9f7ba49c90d0e26d9b5f932b3e88acc3b446999023fbc1b41a3a8cea9ed9cd034174414664221cc3a469e9534f5afb02c50318ba22d87f2a2acc6a0cf7b4fd709c236a2a74290865c47a3572fb3a16002ab9987383d1c901e76e185a1b177e1a0d02b9b94f43a9b1e84e97e322bae3c0e7c8870a6b68956c141fe5087efda117f36c81e0c4b543b57766c61b67ff6cf9a12b9dbd6276c2174d77e8021b377c2ad9b1d3ddcd76ba8c5543f72509c578d5861bd663227a228d6ce1931b235caf66c29f4e2a0ae90dc473665f514c0db6c91dc010ca817a29753f7c4c8337ad887517039274a2257dd51390a17132204c0d158abc734c8ead52b009f09b432c2ba6d27a425d5af61d6d57606d975102034a80920de8fd087539872e8780790ece0ace843188f5496a3177a8d450e8452c5215f86ec522407c64acccddec449ad931150887d728ce006fbaa840572fdc8063dda28ec0396548fb8e4986c86e33439b57a60595ad3d274871cf16440c267b40ea4aabcc44bb891ca42f98c3e716cf7367eb89ff5e3501d61358b581922870d7a2ec1a47a567c96615103484a6e94d00f80110b95ce83001680d0abf0bc8e39bdf26b50369e82bcfc1804335f02888cdb96f938e5093ebf41f6d8e56c06b5291979c93b696ca77e687d5a9971d7962f150200e193dcd5a7ee01a8d36619f885d0cb7fa95263e6a954efb940109c9ce57a906483717650252d4d70faabb7bc2d13a482c3b0418a4ba46e417e9b8d94b1745aae83662c200838fab2a634ee05bdb13ac362874fce9d0b8a9d1979c23611796371b4ada2b107e9720db8aee190c6e7e78a2f3fccf09b7b4d16b62acdfbb2fdf823f2f912bd2d45b1174c5511b06f7d1e14639916ee141830eb9a52dc939bcb53b910fee618f3d769d82d81ee219847680a5bcc7dd5f2c927d55ad469f991cfb0d068e70adcd9dd04a833fceccf977ba8074a48b15fa176f805725d679e2f0ae98d00447039a040e596365f0e3f970964069fef6e60000140465fd54618355fe297d686bea8fff5d4de111968a63141cfded70800fd497f6c81c987dddca520ed085c81bd0babfe93620adc682af44637f697aa139e27f3477e222f76ae295608862271411ed1820963553e76f9258d7567569a09c373fffdc3e6200c76562eeb620d85de2d20d715a1b13c7d82086a242ba57d9777dc08887cc1eb709bfeee8b0d5fdfa1a3c51182278cc64a02a3bb1dd6b3c2816555a02d291edd41f15c58c137a4b830ba068ea575f91fa4a2b5fb52400c3505ac62c0a5479d772e8132e8d0e5", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) 14:16:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0xfdfdffff, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r2, &(0x7f0000000900)) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x10000, 0x0) read$snddsp(r4, &(0x7f0000000100)=""/178, 0xb2) ioctl$RTC_PIE_OFF(r2, 0x7006) migrate_pages(r3, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:46 executing program 3: r0 = socket(0x10, 0x400000000080803, 0x0) write(r0, &(0x7f00000000c0)="240000003a00d17da53a7436fef7001d0a0b49ffede7ff08000028000800030001e7ffff", 0x24) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x4a, 0x0, 0x0) 14:16:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0xfdfdffff, &(0x7f0000000140)}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) 14:16:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e", 0x82}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df08", 0x73}], 0x2) 14:16:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0xfdfdffff, &(0x7f0000000140)}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) 14:16:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r1, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) 14:16:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0xfdfdffff, &(0x7f0000000140)}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 14:16:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32], 0x40}}, 0x0) [ 536.415953][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:48 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 14:16:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:16:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32], 0x40}}, 0x0) [ 536.886671][T17532] binder_alloc: 17528: binder_alloc_buf, no vma [ 536.972394][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000075000/0x4000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0) 14:16:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32], 0x40}}, 0x0) 14:16:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0xad6}], 0x1}}], 0x1, 0x0) 14:16:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) setresgid(0x0, 0x0, r3) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x90, 0xffffffffffffffda, 0x8, {0x4, 0x0, 0x9, 0x6, 0x0, 0x50000000, {0x5, 0x158, 0x8000, 0x1ff, 0x7ff, 0x400, 0x7ff, 0x6, 0x6, 0x2540, 0x5, 0x0, r3, 0x10001, 0xfffffff8}}}, 0x90) quotactl(0x8000, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)="8ad7b091edc0d90794ac1b59d6c68a066f557592b135c455686d8e3adde115aab3af0a412c74cb1a24f9786d59a4a1d6740dfa87037d5bb54ebc715dbfdb1959c165efd674c6e6c196db4a93eebd613df94dfc36b86d8e326e5d89d238cc2767ab7ed7d0a2ac17649c67483170f806c3f5df556b92f2408c7e03b98736abf18e7b30eae56cb1cab7d4f98a724795b5956571da6399af651fe2aee5cab379fb979eaeba694e7ee3b3ed6c17aeb6c3d3f1e6b37aa664") fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000300)=0xc) ioprio_set$uid(0x3, r5, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) setresgid(0x0, 0x0, r7) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x90, 0xffffffffffffffda, 0x8, {0x4, 0x0, 0x9, 0x6, 0x0, 0x50000000, {0x5, 0x158, 0x8000, 0x1ff, 0x7ff, 0x400, 0x7ff, 0x6, 0x6, 0x2540, 0x5, r5, r7, 0x10001, 0xfffffff8}}}, 0x90) quotactl(0x8000, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)="8ad7b091edc0d90794ac1b59d6c68a066f557592b135c455686d8e3adde115aab3af0a412c74cb1a24f9786d59a4a1d6740dfa87037d5bb54ebc715dbfdb1959c165efd674c6e6c196db4a93eebd613df94dfc36b86d8e326e5d89d238cc2767ab7ed7d0a2ac17649c67483170f806c3f5df556b92f2408c7e03b98736abf18e7b30eae56cb1cab7d4f98a724795b5956571da6399af651fe2aee5cab379fb979eaeba694e7ee3b3ed6c17aeb6c3d3f1e6b37aa664") mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x218702c, &(0x7f00000003c0)=ANY=[@ANYBLOB="b6ea987089ba2ded55cf78b49ed8b7adddbf3eecb3", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',allow_other,blksize=0x0000000000001c00,max_read=0x00000000000000ff,max_read=0x0000000000000008,fowner<', @ANYRESDEC=r5, @ANYBLOB="2c6d6561737572652c7065726d69745f646972656374696f2c7375626a14757365723d2c00"]) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r8 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r8, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) [ 537.477849][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:49 executing program 3: 14:16:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 14:16:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) 14:16:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="fee90e082effdede49828f17aae509a82a116c11a0dff5cd21b7b0a819fea40739f35f4f779842e7432ef1d604b902704c043022804198da642017018f13d2d4aa3a5a0a9ecadfa5011eee512d50123c737a3cebb4079fda25f25675840e2d0df81c3ca59e1d066885953e26c8eabf3f9a764340f629cbdcdc965b2ffe5349c0f7c9bd4d9f4ae8a612724da165d187b345ee11fcd370b5d0ad5bf092ae5b4f824935e7566e520b2dae07b765df0a1ab4123a6e87df43dda810ccc3460781655769f7b75ee5d80d983db380f947e24c8290d7291edd9a442eda7c59d4665365ddfe06de17e8db443645257a27201d168d39bc792458a426e86d000515035c8eab9f32aaee8c9120df274403b1898f329b2cf5321aa08319ae6653a85cc3620149224a3fe9b16cb20ed7a2b415b556d2b593e9da611072bbe084303c9ec048598c4995da1825a76860f0615b71c28843a8bcb7ffdb1f9b3b59ae4bfc1161cfca532e5243477d420a62dcc5276878e2965bb9841070cee526687541b267fee3088f64b21ff6b4cacbb1a84f9410a0066e83203abbe900dcc6af83ea7f379954bce823c238175c20fd5213bd6450d183cda562355b671c07a0eaba844a6aecf54aab3e3c74f2c14735a885330e93e461da1016bc095fb4cade61a822cefc594d6d71f41c9f3ca6d0ca8a9ac7428da61e7b2dd557ea3f2b570efe22c3d9b29033b7eec9eec2a690b41b589c19a766dc400516cb722592efd7175433748ee313ff5eb4aadf89ca5c17081d9fed634b3623472e5b4af96a227f162d03529587a5e207b8d30d84e91ee97fe93ccd25f721d781fc5c04ac0528604450392987e49c28d24292cbbf2edafd7a85dc3e63a7f66a78f5649a63e32773102b198d6e40661ceacf4f18d3880911cd69976717b6200154549494d49f374ca42fd1bf50232473db19be7b4559b3df81c7ce713bad88ab90306260aded1efcfa23456932e95fff91c6c19fdbf985226f2580f9aa1254ac34e422817d6a1b8d24113fe1620de62e22d2d9d30aa9a99d71f1d3f6c333cee101b25f061873ac5ba077e68b5af0e8f5a1c562bcad59923685bc05d928b8bdabe8c9283775a1e96d5c2b255f5fafe841986f0e82d10b6bfc6f5508b36ed6c65f82ee8bd4fd6664a046e299f9c2c99f9b0146353962e14566b55b527e79b6a5bb7040744d31dd8d44d2ede941e32853b082212e06f33997493f6b953cdb1174cfc4fe37c5e560b1f4ace0d9859a2709f8b49b3fa484154fda82e8cecea2239739d27db82979e4fbc5f1529ad305d8fe7a8d9eea6fadf947a0ad95902c3113ac671b97d0be5664f5ef393013cb839c7d52ffbf82a5a82a30295ed6e86cd1aacbf65b4a4bd210a9dfab8ae5673260a9f65d3c989641783135e73fcc60d4f2031455b2420d95bd0a866f4cf4db532e5d888bc92474981d7594aaaeb3354adc2c74b69b03fbbe24ca60332140404f4415ae075626069c2a37e91e16e25e34f24410c351ae2c18e186d5495e1877d7b0c82333d1770a2b10a4362e2ae0aadc8668e81bc8d69d20798d395464d81e2c300aea5ca9392e37f3c191a89d6e0791a8bf6958c64d945399e210ae9e72e0231fee10d2836fddc18f4178b9114ccd3cd1d14b51260fe6390ea6956607853a645548069ff1a68a3d1298cd7baf2e20bfca27af8076e9a39774d65a8bf1e6be1811ce3b7ea9ae6290ec31626f75156e77727907f648645ae689d09d4055786356ad38c7b5c6aa631f5a19bbac14214c7fe881ab4ab1d02d6ae1b07eda17108cb1f71676ef6e70be52ee71ea08371b661701b60918bc2c8521863c718ecdf41c67343c2c067d5da3d6b8a9edd059a139eb6299c1e2ec79a8840746c40d3055c4c142d97232952b8136c18a23473a320e3b0b7faa24e5307d239fbd00d7a6116c04cd6f5e89e02b934a790cc4be106ab247e5edb5d226d271a4d9dc2feed4c3ce6740900101c8d4d0655e04df8003a7264ff9e54e93c10f43db27f3e2be9cab459005706c4c975c49481a540c4bc15a03b41afa0376e066f3bc1ba0dc9f68997003e81dd732a2a5f096d00b2099f786229a2a859e007ce17348f19e250e504e9b099e7c71bb918808defbd9aa1f282346067a457199337ed4dc0355dfacfeaef55257e7fb39e99c3fdb6428502b6fa73dbec4a47e92873f2f15b7e46124384be7e9b37f0908d73ed22d4cb665d065b660ee11ff328750c92fb380975478b5c0d39a9558f6fe7b82ba20b53d2d04da9029b6c4562f2475a2c03f4148fa6f3c16853c99930a73495ac99a983368ae8adb5b49304125f98cdce9b715da3fe5ff51b9f75c93f50cf92d6f9bdbc2fb45d032f8c1ab515353b0f4ecb1eb344e3d987b7ed7171d191f0acc3b547f5e220d9f4687ccf8ed8b3523347cc2d653a87124e08733be0457adb00e9de67ead487a0e702a18c352769e8036f88979e0babe0cd8a942883b58216f5aa2038a6a58375a1e8b6cdae9cd98cb77c11784913fb2a463889c4f80e4623fbdbce774d1d18eda1f6ec079066772238c33b4b1bfb441112ec04f8c00222740ead01c471953d63aa6c25a63ba75516c32245bfee9f7ba49c90d0e26d9b5f932b3e88acc3b446999023fbc1b41a3a8cea9ed9cd034174414664221cc3a469e9534f5afb02c50318ba22d87f2a2acc6a0cf7b4fd709c236a2a74290865c47a3572fb3a16002ab9987383d1c901e76e185a1b177e1a0d02b9b94f43a9b1e84e97e322bae3c0e7c8870a6b68956c141fe5087efda117f36c81e0c4b543b57766c61b67ff6cf9a12b9dbd6276c2174d77e8021b377c2ad9b1d3ddcd76ba8c5543f72509c578d5861bd663227a228d6ce1931b235caf66c29f4e2a0ae90dc473665f514c0db6c91dc010ca817a29753f7c4c8337ad887517039274a2257dd51390a17132204c0d158abc734c8ead52b009f09b432c2ba6d27a425d5af61d6d57606d975102034a80920de8fd087539872e8780790ece0ace843188f5496a3177a8d450e8452c5215f86ec522407c64acccddec449ad931150887d728ce006fbaa840572fdc8063dda28ec0396548fb8e4986c86e33439b57a60595ad3d274871cf16440c267b40ea4aabcc44bb891ca42f98c3e716cf7367eb89ff5e3501d61358b581922870d7a2ec1a47a567c96615103484a6e94d00f80110b95ce83001680d0abf0bc8e39bdf26b50369e82bcfc1804335f02888cdb96f938e5093ebf41f6d8e56c06b5291979c93b696ca77e687d5a9971d7962f150200e193dcd5a7ee01a8d36619f885d0cb7fa95263e6a954efb940109c9ce57a906483717650252d4d70faabb7bc2d13a482c3b0418a4ba46e417e9b8d94b1745aae83662c200838fab2a634ee05bdb13ac362874fce9d0b8a9d1979c23611796371b4ada2b107e9720db8aee190c6e7e78a2f3fccf09b7b4d16b62acdfbb2fdf823f2f912bd2d45b1174c5511b06f7d1e14639916ee141830eb9a52dc939bcb53b910fee618f3d769d82d81ee219847680a5bcc7dd5f2c927d55ad469f991cfb0d068e70adcd9dd04a833fceccf977ba8074a48b15fa176f805725d679e2f0ae98d00447039a040e596365f0e3f970964069fef6e60000140465fd54618355fe297d686bea8fff5d4de111968a63141cfded70800fd497f6c81c987dddca520ed085c81bd0babfe93620adc682af44637f697aa139e27f3477e222f76ae295608862271411ed1820963553e76f9258d7567569a09c373fffdc3e6200c76562eeb620d85de2d20d715a1b13c7d82086a242ba57d9777dc08887cc1eb709bfeee8b0d5fdfa1a3c51182278cc64a02a3bb1dd6b3c2816555a02d291edd41f15c58c137a4b830ba068ea575f91fa4a2b5fb52400c3505ac62c0a5479d772e8132e8d0e5", 0xad6}], 0x1}}], 0x1, 0x0) [ 538.018470][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:49 executing program 3: 14:16:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1e, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f38081cdf91fdc9640fc7ac06000f323e3ef80c66b8d14f328866efabecbaf80c66b84256bc8b66efbafc0cb80000efb880068ee866efba210066b87b000000ba4000ed66edb97309000066b89600000066ba00000000f21f660f38dccaff081e1eb9800000c00f32", 0x69}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 538.121727][T17575] binder_alloc: 17572: binder_alloc_buf, no vma 14:16:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) [ 538.373176][T17584] not chained 10000 origins [ 538.377992][T17584] CPU: 0 PID: 17584 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 538.386720][T17584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.396826][T17584] Call Trace: [ 538.400181][T17584] dump_stack+0x1c9/0x220 [ 538.404587][T17584] kmsan_internal_chain_origin+0x6f/0x130 [ 538.410373][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 538.416232][T17584] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 538.422367][T17584] ? __kmalloc_node+0x233/0x11f0 [ 538.427545][T17584] ? kvmalloc_node+0x19a/0x3c0 [ 538.432520][T17584] ? kvmalloc_node+0x241/0x3c0 [ 538.437328][T17584] ? kmsan_get_metadata+0x4f/0x180 [ 538.442503][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 538.448359][T17584] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 538.454567][T17584] ? kvm_page_track_create_memslot+0xdf/0x1e0 [ 538.460779][T17584] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 538.466800][T17584] kmsan_memcpy_metadata+0xb/0x10 [ 538.471855][T17584] __msan_memcpy+0x43/0x50 [ 538.476312][T17584] kvm_set_memslot+0x15b8/0x1b90 [ 538.481314][T17584] __kvm_set_memory_region+0x1b3b/0x1dc0 [ 538.487044][T17584] kvm_vm_ioctl+0x131c/0x4350 [ 538.491776][T17584] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 538.497981][T17584] ? do_vfs_ioctl+0x10f3/0x3370 [ 538.502889][T17584] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 538.509017][T17584] ? security_file_ioctl+0x1a8/0x200 [ 538.514338][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 538.519575][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 538.525426][T17584] ? kvm_stat_data_clear+0x3d0/0x3d0 [ 538.530767][T17584] __se_sys_ioctl+0x2e9/0x410 [ 538.535496][T17584] __x64_sys_ioctl+0x4a/0x70 [ 538.540139][T17584] do_syscall_64+0xb8/0x160 [ 538.544719][T17584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.550637][T17584] RIP: 0033:0x45c6f7 [ 538.554643][T17584] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.574285][T17584] RSP: 002b:00007f369ed62068 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.582736][T17584] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 000000000045c6f7 [ 538.590734][T17584] RDX: 00007f369ed62510 RSI: 000000004020ae46 RDI: 0000000000000004 [ 538.598732][T17584] RBP: 0000000020011000 R08: 00007f369ed62070 R09: 000000000078bf00 [ 538.606731][T17584] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000 [ 538.614737][T17584] R13: 0000000000000004 R14: 00000000004cdffa R15: 00007f369ed646d4 [ 538.623711][T17584] Uninit was stored to memory at: [ 538.628825][T17584] kmsan_internal_chain_origin+0xad/0x130 [ 538.634843][T17584] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 538.640884][T17584] kmsan_memcpy_metadata+0xb/0x10 [ 538.646207][T17584] __msan_memcpy+0x43/0x50 [ 538.650703][T17584] kvm_set_memslot+0x15b8/0x1b90 [ 538.655855][T17584] __kvm_set_memory_region+0x1b3b/0x1dc0 [ 538.661585][T17584] kvm_vm_ioctl+0x131c/0x4350 [ 538.666525][T17584] __se_sys_ioctl+0x2e9/0x410 [ 538.671288][T17584] __x64_sys_ioctl+0x4a/0x70 [ 538.676101][T17584] do_syscall_64+0xb8/0x160 [ 538.680713][T17584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.686769][T17584] [ 538.689133][T17584] Uninit was stored to memory at: [ 538.694411][T17584] kmsan_internal_chain_origin+0xad/0x130 [ 538.700298][T17584] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 538.706485][T17584] kmsan_memcpy_metadata+0xb/0x10 [ 538.711570][T17584] __msan_memcpy+0x43/0x50 [ 538.716244][T17584] kvm_set_memslot+0x260/0x1b90 [ 538.721179][T17584] __kvm_set_memory_region+0x1b3b/0x1dc0 [ 538.727317][T17584] kvm_vm_ioctl+0x131c/0x4350 [ 538.732180][T17584] __se_sys_ioctl+0x2e9/0x410 [ 538.737130][T17584] __x64_sys_ioctl+0x4a/0x70 [ 538.741790][T17584] do_syscall_64+0xb8/0x160 [ 538.746544][T17584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.752615][T17584] [ 538.754975][T17584] Uninit was stored to memory at: [ 538.760096][T17584] kmsan_internal_chain_origin+0xad/0x130 [ 538.766045][T17584] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 538.772226][T17584] kmsan_memcpy_metadata+0xb/0x10 [ 538.777330][T17584] __msan_memcpy+0x43/0x50 [ 538.781992][T17584] kvm_set_memslot+0x15b8/0x1b90 [ 538.787011][T17584] __kvm_set_memory_region+0x1b3b/0x1dc0 [ 538.793009][T17584] kvm_vm_ioctl+0x131c/0x4350 [ 538.797766][T17584] __se_sys_ioctl+0x2e9/0x410 [ 538.802773][T17584] __x64_sys_ioctl+0x4a/0x70 [ 538.807711][T17584] do_syscall_64+0xb8/0x160 [ 538.812445][T17584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.818366][T17584] [ 538.820729][T17584] Uninit was stored to memory at: [ 538.825992][T17584] kmsan_internal_chain_origin+0xad/0x130 [ 538.831793][T17584] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 538.837973][T17584] kmsan_memcpy_metadata+0xb/0x10 [ 538.843264][T17584] __msan_memcpy+0x43/0x50 [ 538.847757][T17584] kvm_set_memslot+0x260/0x1b90 [ 538.852809][T17584] __kvm_set_memory_region+0x1b3b/0x1dc0 [ 538.858541][T17584] kvm_vm_ioctl+0x131c/0x4350 [ 538.863493][T17584] __se_sys_ioctl+0x2e9/0x410 [ 538.868251][T17584] __x64_sys_ioctl+0x4a/0x70 [ 538.873051][T17584] do_syscall_64+0xb8/0x160 [ 538.877660][T17584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.883747][T17584] [ 538.886108][T17584] Uninit was stored to memory at: [ 538.891214][T17584] kmsan_internal_chain_origin+0xad/0x130 [ 538.897132][T17584] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 538.903326][T17584] kmsan_memcpy_metadata+0xb/0x10 [ 538.908413][T17584] __msan_memcpy+0x43/0x50 [ 538.913118][T17584] kvm_set_memslot+0x15b8/0x1b90 [ 538.918171][T17584] __kvm_set_memory_region+0x1b3b/0x1dc0 [ 538.924047][T17584] kvm_vm_ioctl+0x131c/0x4350 [ 538.928815][T17584] __se_sys_ioctl+0x2e9/0x410 [ 538.933705][T17584] __x64_sys_ioctl+0x4a/0x70 [ 538.938548][T17584] do_syscall_64+0xb8/0x160 [ 538.943305][T17584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.949232][T17584] [ 538.951596][T17584] Uninit was stored to memory at: [ 538.956837][T17584] kmsan_internal_chain_origin+0xad/0x130 [ 538.962852][T17584] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 538.968919][T17584] kmsan_memcpy_metadata+0xb/0x10 [ 538.974168][T17584] __msan_memcpy+0x43/0x50 [ 538.978668][T17584] kvm_set_memslot+0x260/0x1b90 [ 538.983828][T17584] __kvm_set_memory_region+0x1b3b/0x1dc0 [ 538.989582][T17584] kvm_vm_ioctl+0x131c/0x4350 [ 538.994461][T17584] __se_sys_ioctl+0x2e9/0x410 [ 538.999231][T17584] __x64_sys_ioctl+0x4a/0x70 [ 539.004042][T17584] do_syscall_64+0xb8/0x160 [ 539.008683][T17584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.015885][T17584] [ 539.018250][T17584] Uninit was stored to memory at: [ 539.028074][T17584] ===================================================== [ 539.028078][T17584] BUG: KMSAN: uninit-value in kallsyms_lookup+0x148/0x8e0 [ 539.028082][T17584] CPU: 0 PID: 17584 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 539.028086][T17584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.028088][T17584] Call Trace: [ 539.028090][T17584] dump_stack+0x1c9/0x220 [ 539.028093][T17584] kmsan_report+0xf7/0x1e0 [ 539.028096][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028098][T17584] __msan_warning+0x58/0xa0 [ 539.028101][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028104][T17584] kallsyms_lookup+0x148/0x8e0 [ 539.028107][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028109][T17584] __sprint_symbol+0x140/0x590 [ 539.028112][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028115][T17584] ? __msan_poison_alloca+0xf0/0x120 [ 539.028118][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028120][T17584] sprint_symbol+0x7c/0x90 [ 539.028123][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028126][T17584] symbol_string+0x157/0x420 [ 539.028129][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028131][T17584] ? vsnprintf+0x30f7/0x31b0 [ 539.028134][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028169][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028172][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028175][T17584] ? kmsan_get_metadata+0x4f/0x180 [ 539.028178][T17584] ? kmsan_internal_set_origin+0x75/0xb0 [ 539.028180][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028183][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028186][T17584] pointer+0x1560/0x1e40 [ 539.028188][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028191][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028194][T17584] ? kmsan_get_metadata+0x4f/0x180 [ 539.028198][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028201][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028203][T17584] vsnprintf+0x1a2a/0x31b0 [ 539.028206][T17584] vscnprintf+0xc2/0x180 [ 539.028208][T17584] vprintk_store+0xef/0x11d0 [ 539.028211][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028214][T17584] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 539.028217][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028220][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028222][T17584] vprintk_emit+0x2c0/0x8b0 [ 539.028225][T17584] ? tick_nohz_tick_stopped+0x2f/0x60 [ 539.028227][T17584] vprintk_default+0x90/0xa0 [ 539.028230][T17584] vprintk_func+0x1ec/0x220 [ 539.028232][T17584] printk+0x18b/0x1d3 [ 539.028235][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028238][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028241][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028244][T17584] stack_trace_print+0x1b1/0x1f0 [ 539.028246][T17584] kmsan_print_origin+0xf5/0x190 [ 539.028249][T17584] kmsan_internal_chain_origin+0x76/0x130 [ 539.028252][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028255][T17584] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 539.028257][T17584] ? __kmalloc_node+0x233/0x11f0 [ 539.028260][T17584] ? kvmalloc_node+0x19a/0x3c0 [ 539.028263][T17584] ? kvmalloc_node+0x241/0x3c0 [ 539.028265][T17584] ? kmsan_get_metadata+0x4f/0x180 [ 539.028268][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028271][T17584] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 539.028274][T17584] ? kvm_page_track_create_memslot+0xdf/0x1e0 [ 539.028277][T17584] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 539.028280][T17584] kmsan_memcpy_metadata+0xb/0x10 [ 539.028282][T17584] __msan_memcpy+0x43/0x50 [ 539.028285][T17584] kvm_set_memslot+0x15b8/0x1b90 [ 539.028288][T17584] __kvm_set_memory_region+0x1b3b/0x1dc0 [ 539.028290][T17584] kvm_vm_ioctl+0x131c/0x4350 [ 539.028293][T17584] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 539.028296][T17584] ? do_vfs_ioctl+0x10f3/0x3370 [ 539.028299][T17584] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 539.028302][T17584] ? security_file_ioctl+0x1a8/0x200 [ 539.028304][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028307][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028310][T17584] ? kvm_stat_data_clear+0x3d0/0x3d0 [ 539.028312][T17584] __se_sys_ioctl+0x2e9/0x410 [ 539.028315][T17584] __x64_sys_ioctl+0x4a/0x70 [ 539.028317][T17584] do_syscall_64+0xb8/0x160 [ 539.028320][T17584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.028323][T17584] RIP: 0033:0x45c6f7 [ 539.028330][T17584] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.028333][T17584] RSP: 002b:00007f369ed62068 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.028340][T17584] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 000000000045c6f7 [ 539.028343][T17584] RDX: 00007f369ed62510 RSI: 000000004020ae46 RDI: 0000000000000004 [ 539.028347][T17584] RBP: 0000000020011000 R08: 00007f369ed62070 R09: 000000000078bf00 [ 539.028350][T17584] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000 [ 539.028354][T17584] R13: 0000000000000004 R14: 00000000004cdffa R15: 00007f369ed646d4 [ 539.028356][T17584] [ 539.028358][T17584] Uninit was created at: [ 539.028361][T17584] kmsan_save_stack_with_flags+0x3c/0x90 [ 539.028364][T17584] kmsan_alloc_page+0xb9/0x180 [ 539.028367][T17584] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 539.028369][T17584] page_frag_alloc+0x3ae/0x910 [ 539.028372][T17584] __netdev_alloc_skb+0x703/0xbb0 [ 539.028375][T17584] batadv_iv_ogm_queue_add+0x10da/0x1900 [ 539.028377][T17584] batadv_iv_ogm_schedule+0xd4c/0x1430 [ 539.028381][T17584] batadv_iv_send_outstanding_bat_ogm_packet+0xbae/0xd50 [ 539.028383][T17584] process_one_work+0x1555/0x1f40 [ 539.028386][T17584] worker_thread+0xef6/0x2450 [ 539.028388][T17584] kthread+0x4b5/0x4f0 [ 539.028391][T17584] ret_from_fork+0x35/0x40 [ 539.028394][T17584] ===================================================== [ 539.028398][T17584] Disabling lock debugging due to kernel taint [ 539.028401][T17584] Kernel panic - not syncing: panic_on_warn set ... [ 539.028406][T17584] CPU: 0 PID: 17584 Comm: syz-executor.2 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 539.028410][T17584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.028412][T17584] Call Trace: [ 539.028414][T17584] dump_stack+0x1c9/0x220 [ 539.028417][T17584] panic+0x3d5/0xc3e [ 539.028419][T17584] kmsan_report+0x1df/0x1e0 [ 539.028422][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028425][T17584] __msan_warning+0x58/0xa0 [ 539.028428][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028430][T17584] kallsyms_lookup+0x148/0x8e0 [ 539.028433][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028436][T17584] __sprint_symbol+0x140/0x590 [ 539.028439][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028441][T17584] ? __msan_poison_alloca+0xf0/0x120 [ 539.028444][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028447][T17584] sprint_symbol+0x7c/0x90 [ 539.028450][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028452][T17584] symbol_string+0x157/0x420 [ 539.028455][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028457][T17584] ? vsnprintf+0x30f7/0x31b0 [ 539.028460][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028463][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028466][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028468][T17584] ? kmsan_get_metadata+0x4f/0x180 [ 539.028471][T17584] ? kmsan_internal_set_origin+0x75/0xb0 [ 539.028474][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028477][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028479][T17584] pointer+0x1560/0x1e40 [ 539.028482][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028485][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028488][T17584] ? kmsan_get_metadata+0x4f/0x180 [ 539.028491][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028494][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028496][T17584] vsnprintf+0x1a2a/0x31b0 [ 539.028498][T17584] vscnprintf+0xc2/0x180 [ 539.028501][T17584] vprintk_store+0xef/0x11d0 [ 539.028504][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028507][T17584] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 539.028509][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028512][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028515][T17584] vprintk_emit+0x2c0/0x8b0 [ 539.028517][T17584] ? tick_nohz_tick_stopped+0x2f/0x60 [ 539.028520][T17584] vprintk_default+0x90/0xa0 [ 539.028522][T17584] vprintk_func+0x1ec/0x220 [ 539.028525][T17584] printk+0x18b/0x1d3 [ 539.028528][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028531][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028534][T17584] ? kmsan_internal_chain_origin+0xad/0x130 [ 539.028536][T17584] stack_trace_print+0x1b1/0x1f0 [ 539.028539][T17584] kmsan_print_origin+0xf5/0x190 [ 539.028542][T17584] kmsan_internal_chain_origin+0x76/0x130 [ 539.028545][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028548][T17584] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 539.028550][T17584] ? __kmalloc_node+0x233/0x11f0 [ 539.028553][T17584] ? kvmalloc_node+0x19a/0x3c0 [ 539.028555][T17584] ? kvmalloc_node+0x241/0x3c0 [ 539.028558][T17584] ? kmsan_get_metadata+0x4f/0x180 [ 539.028561][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028564][T17584] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 539.028567][T17584] ? kvm_page_track_create_memslot+0xdf/0x1e0 [ 539.028570][T17584] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 539.028572][T17584] kmsan_memcpy_metadata+0xb/0x10 [ 539.028575][T17584] __msan_memcpy+0x43/0x50 [ 539.028577][T17584] kvm_set_memslot+0x15b8/0x1b90 [ 539.028580][T17584] __kvm_set_memory_region+0x1b3b/0x1dc0 [ 539.028583][T17584] kvm_vm_ioctl+0x131c/0x4350 [ 539.028586][T17584] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 539.028588][T17584] ? do_vfs_ioctl+0x10f3/0x3370 [ 539.028591][T17584] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 539.028594][T17584] ? security_file_ioctl+0x1a8/0x200 [ 539.028597][T17584] ? kmsan_get_metadata+0x11d/0x180 [ 539.028600][T17584] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 539.028603][T17584] ? kvm_stat_data_clear+0x3d0/0x3d0 [ 539.028605][T17584] __se_sys_ioctl+0x2e9/0x410 [ 539.028608][T17584] __x64_sys_ioctl+0x4a/0x70 [ 539.028610][T17584] do_syscall_64+0xb8/0x160 [ 539.028613][T17584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 539.028616][T17584] RIP: 0033:0x45c6f7 [ 539.028623][T17584] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.028626][T17584] RSP: 002b:00007f369ed62068 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.028632][T17584] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 000000000045c6f7 [ 539.028636][T17584] RDX: 00007f369ed62510 RSI: 000000004020ae46 RDI: 0000000000000004 [ 539.028639][T17584] RBP: 0000000020011000 R08: 00007f369ed62070 R09: 000000000078bf00 [ 539.028643][T17584] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000 [ 539.028646][T17584] R13: 0000000000000004 R14: 00000000004cdffa R15: 00007f369ed646d4 [ 539.028651][T17584] Kernel Offset: 0xd800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)