11(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) [ 355.882063][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 355.891897][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 355.901728][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 355.911561][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 355.921509][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.037091][ T32] audit: type=1800 audit(1582001771.115:32): pid=11708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 [ 356.095513][T11714] FAULT_INJECTION: forcing a failure. [ 356.095513][T11714] name failslab, interval 1, probability 0, space 0, times 0 [ 356.108653][T11714] CPU: 1 PID: 11714 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 356.117392][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.127694][T11714] Call Trace: [ 356.131086][T11714] dump_stack+0x1c9/0x220 [ 356.135653][T11714] should_fail+0xa4e/0xa60 [ 356.140179][T11714] __should_failslab+0x255/0x270 [ 356.145229][T11714] should_failslab+0x29/0x70 [ 356.149917][T11714] kmem_cache_alloc+0xd0/0xd70 [ 356.154777][T11714] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 356.160692][T11714] ? skb_clone+0x328/0x5d0 [ 356.165206][T11714] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 356.171376][T11714] ? kmsan_get_metadata+0x11d/0x180 [ 356.176862][T11714] skb_clone+0x328/0x5d0 [ 356.181221][T11714] netlink_deliver_tap+0x788/0xeb0 [ 356.186453][T11714] netlink_unicast+0xa34/0x1100 [ 356.191529][T11714] netlink_ack+0x10b4/0x1170 [ 356.196265][T11714] netlink_rcv_skb+0x321/0x650 [ 356.201116][T11714] ? rtnetlink_bind+0x120/0x120 [ 356.206061][T11714] rtnetlink_rcv+0x50/0x60 [ 356.210583][T11714] netlink_unicast+0xf9e/0x1100 [ 356.215534][T11714] ? rtnetlink_net_exit+0x90/0x90 [ 356.220733][T11714] netlink_sendmsg+0x1248/0x14d0 [ 356.225782][T11714] ? netlink_getsockopt+0x1440/0x1440 [ 356.231233][T11714] ____sys_sendmsg+0x12b6/0x1350 [ 356.236280][T11714] __sys_sendmsg+0x451/0x5f0 [ 356.240986][T11714] ? kmsan_get_metadata+0x11d/0x180 [ 356.246282][T11714] ? kmsan_get_metadata+0x11d/0x180 [ 356.251667][T11714] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 356.257565][T11714] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 356.263737][T11714] ? prepare_exit_to_usermode+0x1ca/0x520 [ 356.269559][T11714] __se_sys_sendmsg+0x97/0xb0 [ 356.274308][T11714] __x64_sys_sendmsg+0x4a/0x70 [ 356.279130][T11714] do_syscall_64+0xb8/0x160 [ 356.283714][T11714] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 356.289648][T11714] RIP: 0033:0x45c6b9 [ 356.293598][T11714] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.313426][T11714] RSP: 002b:00007fa903014c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.321909][T11714] RAX: ffffffffffffffda RBX: 00007fa9030156d4 RCX: 000000000045c6b9 [ 356.330042][T11714] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000005 [ 356.338262][T11714] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 04:56:11 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mprotect(&(0x7f0000531000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 356.346282][T11714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 356.354404][T11714] R13: 0000000000000961 R14: 00000000004d53a8 R15: 0000000000000005 04:56:11 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000100)="39000000140081ae00002c000500018701546fabcae5e5741af20f367c355fee27a04f7e0592616675e285af71583c7d06a6580e883795c0c5", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg(r0, &(0x7f0000000b80)={&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x40186366, &(0x7f0000000c00)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) r3 = mq_open(&(0x7f0000000480)='w\x06a\xfeW\xac\xba\xa8\x89\xfc\xb94u\x12\xf5\xf1\xa0\xb0\x8c\xc3\ac\xac\x83\xc2\xc9nTB\xd0\x89\xf1\x0e\x954UR\r\xca\x9d\n\xafZ$6\xee\x81T\xba\xf1\xd3H\x9d\x94j\xb6-\xe4{B\x00'/72, 0x2, 0x45, &(0x7f00000001c0)={0x29f, 0xb419, 0x40003}) r4 = dup2(r3, r2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000080)=0x18) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r8, &(0x7f0000000140)="2400000022001f0214f9f407008000000400000000000000feffffff0800000000000800", 0x24) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)) r9 = creat(&(0x7f0000000380)='./file0/file0\x00', 0x80) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000800)='.\x00', 0xa400295c) dup2(r10, r9) write$P9_RSETATTR(r9, &(0x7f00000002c0)={0x7, 0x1b, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000900)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48b0346273bd0f03, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 04:56:11 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) r19 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = fcntl$dupfd(r20, 0x0, r19) ioctl$sock_SIOCGIFBR(r21, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r21, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r18}, {0x8, 0x0, r22}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r23}, {}, {0x8, 0x3, r24}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r25 = accept4(r2, 0x0, 0x0, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r25, r26, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r26, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r27, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=r17], 0x0, 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x66, 0x1}, 0x10, r28}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r26, 0x84, 0x77, &(0x7f0000000f00)=ANY=[@ANYRES32=r29, @ANYBLOB="6eed11abf0f13109f9f8d6e32c20ea9a1be04a927edd118e59351d69aac31337b1080defb06e97dfbf8f2ee9556c85998bbea02a417ef9f9"], &(0x7f0000000ec0)=0xa) 04:56:11 executing program 0 (fault-call:5 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) [ 356.661596][ C1] sd 0:0:1:0: [sg0] tag#4460 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 356.672279][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB: Test Unit Ready [ 356.678984][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.688958][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.698774][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.708644][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.718918][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.729715][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.739647][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.749477][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.757923][T11725] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 356.759282][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.777338][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.787165][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.797102][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.806922][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.816731][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.826524][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.827621][ T32] audit: type=1800 audit(1582001771.785:33): pid=11727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 04:56:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mprotect(&(0x7f0000531000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xd8, 0x0, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x44}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24044005}, 0x44810) r5 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r7, 0x1}, 0x14}}, 0x0) 04:56:12 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000100)="39000000140081ae00002c000500018701546fabcae5e5741af20f367c355fee27a04f7e0592616675e285af71583c7d06a6580e883795c0c5", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg(r0, &(0x7f0000000b80)={&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x40186366, &(0x7f0000000c00)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) r3 = mq_open(&(0x7f0000000480)='w\x06a\xfeW\xac\xba\xa8\x89\xfc\xb94u\x12\xf5\xf1\xa0\xb0\x8c\xc3\ac\xac\x83\xc2\xc9nTB\xd0\x89\xf1\x0e\x954UR\r\xca\x9d\n\xafZ$6\xee\x81T\xba\xf1\xd3H\x9d\x94j\xb6-\xe4{B\x00'/72, 0x2, 0x45, &(0x7f00000001c0)={0x29f, 0xb419, 0x40003}) r4 = dup2(r3, r2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000080)=0x18) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r8, &(0x7f0000000140)="2400000022001f0214f9f407008000000400000000000000feffffff0800000000000800", 0x24) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)) r9 = creat(&(0x7f0000000380)='./file0/file0\x00', 0x80) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000800)='.\x00', 0xa400295c) dup2(r10, r9) write$P9_RSETATTR(r9, &(0x7f00000002c0)={0x7, 0x1b, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000900)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48b0346273bd0f03, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 357.256915][ T32] audit: type=1800 audit(1582001772.335:34): pid=11733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 04:56:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_vlan\x00', 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) [ 357.527580][T11738] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 04:56:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mprotect(&(0x7f0000531000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:12 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) r19 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = fcntl$dupfd(r20, 0x0, r19) ioctl$sock_SIOCGIFBR(r21, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r21, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r18}, {0x8, 0x0, r22}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r23}, {}, {0x8, 0x3, r24}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r25 = accept4(r2, 0x0, 0x0, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r25, r26, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r26, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r27, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=r17], 0x0, 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x66, 0x1}, 0x10, r28}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) [ 357.813482][ C0] sd 0:0:1:0: [sg0] tag#4463 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 357.817384][ T32] audit: type=1800 audit(1582001772.885:35): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 [ 357.824304][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB: Test Unit Ready [ 357.851185][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x20000000) [ 357.861119][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.870976][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.880846][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.890718][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.900563][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.910426][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.920285][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.930129][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.939958][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.949808][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x11) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x8, 0x0, @mcast2, 0x5}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, 0x0, 0xa808) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x80800) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcsa\x00', 0x840, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000400), &(0x7f0000000480)=0x14) write(r0, &(0x7f0000000240)="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", 0x159) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000001c0)=0x3, 0x4) [ 357.959672][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.969500][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.979351][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 357.989190][ C0] sd 0:0:1:0: [sg0] tag#4463 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mprotect(&(0x7f0000531000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x3, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket(0x11, 0x800, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r9, r8, 0x0, 0x8, &(0x7f0000000300)='nl80211\x00'}, 0x30) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="2600000037010001010000000000000000000000010000008408028610419177b570ccd40518395958a60849d12f18bff3dd5b833acb261b15d0b222a19889b811575da978846cd6d1d8ac119543fb5731a4c7fe6584182a6fb42b2d71618335e9c260ae2c5e699e2cb7897edf1fa7c3680960ec098b9dc5093ee807a746aaee6e8c799e581dbc783a9b08339ab9d24a41ebb558ae4535cff01dd7a24eeb119faa4f5a94aaa6a35ac112b0584ad4dc1f7bf5e227a1036c9ed16360f61131292f016a3ea3ba3d12837258d7f29b889ecc13ff917119c856931fc9715c971c0605e9285abc9361f193f11733f1f87aa6e4a0", @ANYRES32=r10, @ANYBLOB='\b\x00nl80211\x00'], 0x26) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f0000000400)=@req3={0x2, 0xb96, 0x7f, 0x3, 0x8, 0x5, 0x81}, 0x1c) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f00000002c0)=0x8000, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r14, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4041) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0xd) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1, 0x70bd2c}, 0x14}}, 0x0) [ 358.297057][ T32] audit: type=1800 audit(1582001773.375:36): pid=11758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 04:56:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mprotect(&(0x7f0000531000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x808, @empty, 0x6}, 0x1c) [ 358.754607][ T32] audit: type=1800 audit(1582001773.825:37): pid=11768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 04:56:13 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) r19 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = fcntl$dupfd(r20, 0x0, r19) ioctl$sock_SIOCGIFBR(r21, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r21, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r18}, {0x8, 0x0, r22}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r23}, {}, {0x8, 0x3, r24}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r25 = accept4(r2, 0x0, 0x0, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r25, r26, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r26, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r27, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=r17], 0x0, 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x66, 0x1}, 0x10, r28}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 04:56:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigtimedwait(&(0x7f0000000040)={[0x4]}, &(0x7f00000000c0), &(0x7f0000000140), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:56:14 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mprotect(&(0x7f0000531000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 358.939813][ C0] sd 0:0:1:0: [sg0] tag#4464 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 358.950488][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB: Test Unit Ready [ 358.957666][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 358.967649][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 358.977611][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 358.987512][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 358.997362][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.007296][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.017325][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.027157][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.036967][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.046970][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.056813][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.066744][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.076605][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.086540][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.096366][ C0] sd 0:0:1:0: [sg0] tag#4464 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:14 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) r19 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = fcntl$dupfd(r20, 0x0, r19) ioctl$sock_SIOCGIFBR(r21, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r21, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r18}, {0x8, 0x0, r22}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r23}, {}, {0x8, 0x3, r24}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r25 = accept4(r2, 0x0, 0x0, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r25, r26, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r26, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r27, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=r17], 0x0, 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x66, 0x1}, 0x10, r28}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 04:56:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$vhost_msg(r5, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/7, 0x7, &(0x7f00000001c0)=""/102, 0x2, 0x4}}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x80082102, &(0x7f0000000140)=r12) r13 = socket(0x10, 0x3, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r14, 0x1}, 0x14}}, 0x0) r15 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@alg, &(0x7f0000000340)=0x80, 0x80000) sendmsg$NL80211_CMD_LEAVE_MESH(r15, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r14, 0x0, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4040110) r16 = accept$inet(r13, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) ioctl$sock_SIOCBRDELBR(r16, 0x89a1, &(0x7f00000000c0)='ipvlan1\x00') [ 359.303383][ T32] audit: type=1800 audit(1582001774.375:38): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 [ 359.394141][ C0] sd 0:0:1:0: [sg0] tag#4465 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 359.405042][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB: Test Unit Ready [ 359.411806][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.421788][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.431637][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.441622][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.451613][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.461488][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.471350][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.481295][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.491164][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.501026][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.511018][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.520874][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.530819][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:14 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 359.540671][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.550507][ C0] sd 0:0:1:0: [sg0] tag#4465 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:14 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) r19 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = fcntl$dupfd(r20, 0x0, r19) ioctl$sock_SIOCGIFBR(r21, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r21, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r18}, {0x8, 0x0, r22}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r23}, {}, {0x8, 0x3, r24}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r25 = accept4(r2, 0x0, 0x0, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r25, r26, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r26, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r27, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=r17], 0x0, 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x66, 0x1}, 0x10, r28}, 0x78) 04:56:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r9, r8) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000000)={r8}) [ 359.802775][ C0] sd 0:0:1:0: [sg0] tag#4466 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 359.813476][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB: Test Unit Ready [ 359.820257][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.830262][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.840231][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.850233][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.860115][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.870009][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.879963][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.889964][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.899907][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.909819][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.919692][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.929575][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.939421][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.949580][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.959558][ C0] sd 0:0:1:0: [sg0] tag#4466 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.968584][ T32] audit: type=1800 audit(1582001775.025:39): pid=11797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 04:56:15 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) r19 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = fcntl$dupfd(r20, 0x0, r19) ioctl$sock_SIOCGIFBR(r21, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r21, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r18}, {0x8, 0x0, r22}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r23}, {}, {0x8, 0x3, r24}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r25 = accept4(r2, 0x0, 0x0, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r25, r26, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r26, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r27, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=r17], 0x0, 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x66, 0x1}, 0x10, r28}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 04:56:15 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) fcntl$dupfd(r2, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket(0x11, 0x4, 0x82) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r7, 0x1}, 0x14}}, 0x0) [ 360.298023][ T32] audit: type=1800 audit(1582001775.375:40): pid=11807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 [ 360.322014][ C1] sd 0:0:1:0: [sg0] tag#4467 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 360.332653][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB: Test Unit Ready [ 360.339397][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.349197][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.359152][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.369101][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.378909][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.388790][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.398672][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.408574][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.418380][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.428351][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.438195][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.448343][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.458224][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.468069][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.478411][ C1] sd 0:0:1:0: [sg0] tag#4467 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:15 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r26, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r26}}, 0x10) 04:56:15 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="100100001300000825bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a800040004100000c000198014000400d99456cdc113252a56ae2abfbdcdf96e1400050015ce970cf112503709063485706b195b14000400966a8819890bf8bb9a4e5193776dbfd26a00020000000000000000e67bb1eedf4bd2658d197bbeaf603b1b295005746d36f124d2ddf3378327dda7def14ea36b9a364a325ae60540602d61047c20cff020f23c55f305624ef834395aee68181c9a132e5399be0feeee675c0a7a2a086401bea0f85a65490da76e00001400040027fbd5c4b9f8ef6a16397c3eaf1832e70500110009000000070022008c91fd0008000500", @ANYRES32=r9, @ANYBLOB="050021000500000008000400422b000008002c0006000000"], 0x110}}, 0x0) dup3(r7, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0xcfda) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r13, 0x1}, 0x14}}, 0x0) [ 360.759826][ C0] sd 0:0:1:0: [sg0] tag#4468 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 360.770487][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB: Test Unit Ready [ 360.777330][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.787235][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.797076][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.807031][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.816892][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.826780][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.836609][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.846505][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.856426][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.866459][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.876305][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.886263][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.896118][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.905963][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.915821][ C0] sd 0:0:1:0: [sg0] tag#4468 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.924823][ T32] audit: type=1800 audit(1582001775.905:41): pid=11820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 04:56:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) r19 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = fcntl$dupfd(r20, 0x0, r19) ioctl$sock_SIOCGIFBR(r21, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r21, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r18}, {0x8, 0x0, r22}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r23}, {}, {0x8, 0x3, r24}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r25 = accept4(r2, 0x0, 0x0, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r25, r26, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r26, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r27, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=r17], 0x0, 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x66, 0x1}, 0x10, r28}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 04:56:16 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r3, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) [ 361.208987][ C0] sd 0:0:1:0: [sg0] tag#4469 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 361.219655][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB: Test Unit Ready [ 361.226425][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.236299][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.246198][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.256081][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.265949][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.275789][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.285669][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.295471][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.305344][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.315187][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.325211][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.335039][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.344871][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.354757][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.364694][ C0] sd 0:0:1:0: [sg0] tag#4469 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 361.373484][ T32] audit: type=1800 audit(1582001776.385:42): pid=11832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 04:56:16 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) 04:56:16 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r26, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r26}}, 0x10) 04:56:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0108000000400000b22668c70000"], 0x14}}, 0x0) 04:56:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 362.001826][ C0] sd 0:0:1:0: [sg0] tag#4471 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 362.012487][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB: Test Unit Ready [ 362.019242][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.029106][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.038967][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.048996][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.058851][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.068695][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.078672][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.088529][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x5c, 0x66, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffe0, 0xffff}, {0xfff2, 0x6}}, [{0x8, 0xb, 0xbd}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xd4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x4fa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004001}, 0x800) r5 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r7, 0x1}, 0x14}}, 0x0) [ 362.098415][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.108288][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.118135][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.127990][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.138976][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) r19 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = fcntl$dupfd(r20, 0x0, r19) ioctl$sock_SIOCGIFBR(r21, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r21, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r18}, {0x8, 0x0, r22}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r23}, {}, {0x8, 0x3, r24}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r25 = accept4(r2, 0x0, 0x0, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r25, r26, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r26, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r27, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=r17], 0x0, 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x66, 0x1}, 0x10, r28}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) [ 362.149326][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.159214][ C0] sd 0:0:1:0: [sg0] tag#4471 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.340014][T11857] batman_adv: Cannot find parent device [ 362.349467][ C1] sd 0:0:1:0: [sg0] tag#4472 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 362.360194][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB: Test Unit Ready [ 362.366892][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.376898][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.386777][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.396839][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.406694][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.417178][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.428188][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.438085][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.448613][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.458459][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.468403][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.478406][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.488273][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.498154][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 362.507979][ C1] sd 0:0:1:0: [sg0] tag#4472 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000057f000/0x1000)=nil}) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x21) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 04:56:18 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r26, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r26}}, 0x10) 04:56:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) r19 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = fcntl$dupfd(r20, 0x0, r19) ioctl$sock_SIOCGIFBR(r21, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r21, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r18}, {0x8, 0x0, r22}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r23}, {}, {0x8, 0x3, r24}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r25 = accept4(r2, 0x0, 0x0, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r25, r26, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r26, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r27, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=r17], 0x0, 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x66, 0x1}, 0x10, r28}, 0x78) [ 363.072622][ C1] sd 0:0:1:0: [sg0] tag#4473 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 363.083335][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB: Test Unit Ready [ 363.090168][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.092012][ C0] sd 0:0:1:0: [sg0] tag#4474 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 363.100101][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.110643][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB: Test Unit Ready [ 363.120427][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.126952][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.136811][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.146627][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.156324][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.166038][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.175731][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.185458][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.195146][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.204846][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.214527][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.224251][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.233840][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.243557][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.253481][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.263161][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.272835][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.282503][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.292194][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.301908][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.311768][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.321503][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.331169][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.340856][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.350597][ C1] sd 0:0:1:0: [sg0] tag#4473 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.360318][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.379143][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.389000][ C0] sd 0:0:1:0: [sg0] tag#4474 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 363.644636][ T32] audit: type=1800 audit(1582001778.705:43): pid=11882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=15 res=0 04:56:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 04:56:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x100}, 0x14}}, 0x0) 04:56:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r26, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f00000006c0)={&(0x7f0000001000)=""/175, 0xaf, r26}}, 0x10) 04:56:19 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r26, 0x4) [ 364.000821][ T32] audit: type=1800 audit(1582001779.075:44): pid=11891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=16 res=0 04:56:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 364.373398][ T32] audit: type=1800 audit(1582001779.445:45): pid=11903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=17 res=0 [ 364.425393][ C1] sd 0:0:1:0: [sg0] tag#4476 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 364.436144][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB: Test Unit Ready [ 364.442944][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.452944][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.462832][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.472900][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.482878][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.485286][T11905] batman_adv: Cannot find parent device [ 364.492762][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.508073][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.517968][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.527851][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.537727][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.547617][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.557499][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.567365][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.577247][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.587130][ C1] sd 0:0:1:0: [sg0] tag#4476 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:19 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x8040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r6) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)={0x11, 0x9, 0x2, 0x7, 0x154, 0xffffffffffffffff, 0x9, [], r10, r13, 0x0, 0x5}, 0x40) r15 = socket$tipc(0x1e, 0x2, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r18, r17) r19 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r22, 0x8904, &(0x7f0000000b00)=0x0) r24 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') getsockopt$inet_sctp6_SCTP_STATUS(r24, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x100000000, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4f23, @rand_addr=0x7f}}, 0x200, 0x8, 0xa, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r24, 0x84, 0xf, &(0x7f0000000740)={r25, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) getsockopt$inet_IP_XFRM_POLICY(r24, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000009c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r24, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@empty, @in6=@loopback, 0x4e23, 0x80000001, 0x4e20, 0x10000, 0xa, 0x0, 0xa0, 0xed, r26, r27}, {0x0, 0x4, 0x2, 0x0, 0x1000, 0x4, 0x1, 0x2}, {0x9, 0x0, 0x5, 0x6}, 0x3, 0x6e6bb1, 0x3, 0x0, 0x3, 0x1}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in6=@ipv4={[], [], @multicast1}, 0x3501, 0x1, 0x3, 0x0, 0x1, 0x1, 0xce5c}}, 0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000c00)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r32 = dup2(r31, r30) ioctl$PERF_EVENT_IOC_ENABLE(r32, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r32, 0x29, 0x22, &(0x7f0000000c40)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000d40)=0xe8) r34 = getpid() sched_setscheduler(r34, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000d80), &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) getresgid(&(0x7f0000000e40)=0x0, &(0x7f0000000e80), &(0x7f0000000ec0)) r37 = getpid() sched_setscheduler(r37, 0x5, &(0x7f0000000380)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002840)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000002940)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002980)=0x0) stat(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) [ 364.644356][ C0] sd 0:0:1:0: [sg0] tag#4475 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 364.655194][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB: Test Unit Ready [ 364.661821][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.671726][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.681591][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.691456][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.701293][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.711147][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.721005][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.730856][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.740822][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.750680][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.760516][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.770354][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.780542][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 sendmmsg$unix(r0, &(0x7f0000002b80)=[{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000040)="638e6e26e70c1388d9959e6126a881da9261", 0x12}, {&(0x7f00000003c0)="31fbf47919f08f4d387218a3013200027dd73417898f6e1f043b6c2a8b3db3770a3dfdd089c192d9a5167615ddd390cc31ded149619ee31d3be51f5e4cf35a88fa666d5b54c5b6cbe92a3f117a789759a9f2f8cb05b3d7fd74762d8c7d3f3d", 0x5f}, {&(0x7f0000000440)="66b6fe013a8008a2e1ddb09a39131e890f00842255214f24fa0a97079d1fd15c4ed40b9fd81586d99a0b6380d4bda7a0404a49c217df6a108865c5c6c81eeb8e416d8d5c65317224fa7230056627a6763998e5c2377d29b88e10a1f8e8c85dbb21a265cd2b7ea8f246898fc13142c62aebbcb9be30e70b4ee9838e0ae443db248016a8c6fb8e23cf176d92495c54d6f37ddbf769b7ab221b4ad0383b4d0a5c939b5e1ab885c34ff5debfcea5", 0xac}], 0x3, 0x0, 0x0, 0x10000800}, {&(0x7f0000000500)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)="f37f95f4e26b7a68177e4387ef286ac609b526139c18e3a0b49314f09801175367e9e0ddefd890bcf1c5447bbf6bd8649649ffea16dd989f6c93629afa2cc70e25312d5c3d14a214cce350062418442ce8e2e58f96381c10b0b9a4d0423d7455680476da923b49c5baf7322bf29e6eeae141cb87d37735f113a2", 0x7a}, {&(0x7f00000006c0)="11f3738489264938cd9bbe4798013c259614bd1762f71cb5cff03bf2d9fb3554fa7ddc25064c99675d6581d517ed3682f1b7ecc31d1b511ea218ee5654f778fd4bf7de590e54f0d4ec7fb0cb55e0e8d8d77689503e8cee2522f0a3742d7842a964775b1c225a4cc6305dee9897ea538d2d6ac0cd23da8e91a9cb7b5364cce0277954a119a0e13ad9ff8285ca2c1a412932a2c0cfb84bd7260dad124c17caa8101a8060d96c4495398424f7298d28b251bfa9992dfa4afa694f09", 0xba}, {&(0x7f00000007c0)="de340b0ca44a7c3a4b31ea195b6fd3831cf1081a30037b50bd6b0fb41ee0129d6c1299fdbe5aa3fec0b920626afbe1f91a43b460795974c7506a341b36b032154bf8e1be889929f3bc431e2d2127e9dea76359b8856aa011076587c5274824fe970276a59eb79ff41292", 0x6a}, {&(0x7f0000000840)="7a4bf25e1e8b7649a2d72f9d5336872fc1d0a9238d0e97789087cf819c25dc49b92fa19dba8fddb50767bfd41bb8f2d80ef238e23c4d0a4a9b84c36f92554cc966dd0d123a7a278e2fe92dc352348f8e19103afcb77f0cd55d0657b29cc0d36ff5660f1e8a100f85a38a9c2eec1e1cdba606e1d4e03db75572d73d4b94347be4a190280f345fbb3c9caba9a480e243e0b89387a7e037150e9f77ecc8f0168d6c95128e1dc4fc42d3dab3139c74a49517d9eb47ce5016499424831044a0d6891c365f55255b3a03c4c710ca115dd103021e8ef5eab345ccb3e14355a44042c5d7277577910b64b9221ee329ddd3", 0xed}, {&(0x7f0000000940)="8dbb4b78a28f21c6ab9cce6e447a29daf32b7505bb1bbad287998583a9cb72d99e33f0c3a05b00cbb2a74e09308f7f4de9b803d5162b7c8159d2535654135acd5c5bdf2358cb83503a918d080ce854b11fa6f37507d362c862fd7cdf24614587bb40d9436635f804b33635c62bb09a106331fd717fa936f9987b22a8d13ed9c2c6495e871cd607eddfb1df8c03d89ecda7fce6c9adb8b341a5b1642b70b7241f59ce086ab998d71759bf05f66bb03f32784f7eda350ea2d5dcc3527b5a9ae109bffade6e443e51e4ed7a944d", 0xcc}], 0x5, &(0x7f0000000f00)=[@rights={{0x20, 0x1, 0x1, [r1, r2, r5, r6]}}, @rights={{0x24, 0x1, 0x1, [r14, r15, r16, r17, r19]}}, @cred={{0x1c, 0x1, 0x2, {r23, r27, r28}}}, @cred={{0x1c, 0x1, 0x2, {r29, r33, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r34, r35, r36}}}], 0xa8}, {&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000001040)="a8a17fa3facba5b314e4f06293ae281820688fda9544ca6edf90ba8ff10b2d43b5c822598d6248554f0266c22ffd0d62e34c6bd7a99e338585b1252f93b1dfce650e91cf5b413f59119b734a4b6d3aa4fec128a0bb312c7c0353003a87f095c80471bc3ed49afe12c3d0bab99f3dfce9cf96843dc615394932982cfb56d0e17562cfaa29040c6ac6a62ec012588b9831c098b2a8e4acd8cc36", 0x99}, {&(0x7f0000001100)="d08fef4a054a92f58a9178b5d6a7678ebfc663777fafeb361ff5c23d4d8419af729c81c8d5fd238f9e68a70532ad5401c9f573e0211b9ef23773de02ee7ad050a4e181db3035fdcbee847c8cdfb2386978b220c84bbdc9ef249389b94b30f35c97e716bddf859b96a19e04d356cafcf4ef36cda0e51bd6e87279a8814055aa5a0a962b132e5d85dc6c37bca555cb653cdccef5966a2c67f7c6ea28da201624c2985a11a8d41a5a94b099ce5ef5b5b810a117ce58dde1f66b3d0435ccb5c3e004416ca7f75d2107c7c13e6ed8272736e7259d786526517f5f0cfa8a0086acb8735b5c", 0xe2}, {&(0x7f0000001200)="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", 0x1000}], 0x3, 0x0, 0x0, 0x44011}, {&(0x7f0000002240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000027c0)=[{&(0x7f00000022c0)="cc9d7de52ec638313ebc3b352a9a1e680159d83df861377bea01a3b97604ba7da6467572e9250f1510b573760e5a3adbfb1e0a184ee88a2592c63cc0f8096545dc6edcfb02bc0eef3f4bd76f5a5df459c19a9f1750b02cde5b7172fa2d42d30b0eb0d555983715bfd61c75e24084331736c5848ead98146e4e52671adb12cc64c43314d913c64ebc03b7", 0x8a}, {&(0x7f0000002380)="e389cd32fb473e040a849e971492df3b91029bd95e828e5f005db2396d0a155a03df59903569e15ca84f5fa7ee22c5bea1c175de6763b39278a83316943977ffcab6f264a2095f97e24efef2d4295a38d900f4d206ef93bc60ce4fae28264fae59203108959ed75a6839561effb142ef2d4d62052970c8de2b45534ba8949b2ad5ad2d61de77211daed297a79620e5a135dce9289bd3769628149b202c23a9054de2bdb560fc1f932f58e9d677eb16fa2558d898ef931362eebfc7ba01ae", 0xbe}, {&(0x7f0000002440)="8a833c73b65c5ed2df1301dcd0f9f8ffe0a35b3568cf4a9478240ddcec7f060e2bd3f60072389af764d9bb0dbae78a8b1842d3baf162e6c2cede10e2c9671671371482319113a7235fa9b1efd7484586d255c0665f03ec5a39ce13aef4501fad926cc6ac9e1a9e9179573388ce61d3855a7447b095ff3d06b24a8911e109a9f3daf077d2b80c86455c2b555b3a03fa2304a3fc33ae76b839a07e8f05bba74e5f11ea21e5482e9148ef33cf90038ea0c10c44ea79d32ffe75f9d88b56be8a7fa428660c2d662acb5e0bf0c090f173f6debb66b155466d7fd26bba16d96b6a9387820e1ab580", 0xe5}, {&(0x7f0000002540)="b7e91e7188b8f8b8c383b05433a61a1eeaeaefdea8a3224abe8beb8328d58d8240b471cdf6827085705721b958e52296031ed03d12fa931768e2fd3373603081106226b0956384c08bd11a6b725c5da90c748e2e84c942c5661461ded23f4a70e760a54ca2c1707cb614835e2d93cfb5", 0x70}, {&(0x7f00000025c0)="885f32a539df93ef607db0b41839943f86a92293f2b8a01d9b013651b4505074a86b0fe6069d903acc3f42975174019cf02bbd1b75579e238cacccd3d50260e346b8f8e783f0369f4371b2803cd7379322e4f73850faea49a473a72feffb28a0d9a65d917f1b9c7a535b30d84ed4a0c6ad1c7d2b401a06ce70e0f8a274922284f908f03eacd11f09bab5dd50ced15e8f4033a444937c54150a493c272bbf651244c1371218e9cb184e2c8e0e537508eaa02098d070acc3b45c4b0700d3d58c5d066921571db3d23698db7594f52eabb4f023b42f7000907dd0aa0a89441d318f4a5a9ab0667d4131168b068bb593e3ec79457eef9a", 0xf5}, {&(0x7f00000026c0)="f4f1352e", 0x4}, {&(0x7f0000002700)="6254b484a6fbfff28739bb8b65afc9147bc582573285dd3bc9582fc7452c3d47712c05af30bec6afa08fd39c2db58d0b5d2e90f69aff49704b2b2e2504653084e36657412e538ad9d0b4a053ef327fb34fbb8efd7eb9d8b19dff475d0db90aebe6877204a4cbbdc096e8be1139a9462eb16f3b79e3ebf4624d0f5298368a985eb1a8b7c671053092d9877d673effa0e87dbefd02144250cd53b7306d16f04c60634a", 0xa2}], 0x7, &(0x7f0000002b40)=[@cred={{0x1c, 0x1, 0x2, {r37, r38, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r39, r40, r41}}}], 0x40, 0x20040040}], 0x4, 0x40010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r44 = dup2(r43, r42) ioctl$PERF_EVENT_IOC_ENABLE(r44, 0x8912, 0x400200) r45 = socket(0x10, 0x3, 0x0) r46 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r45, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r46, 0x1}, 0x14}}, 0x0) r47 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r47, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r47, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r47, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="9e377a301d4efd91dcc13b447b9458324183081d5c9be587cff5cfa056b5afd157519761cedf4275012525cc9faba29155e1e9b52de105df3aad6bc0616d6871304daf427e2322d12593f933adaf2b1bc75b196d7d5712a6bd12c800002b785d23ddd0c21b25dfff7801fcf07f934e6f8ed108a4dede05d895", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0xc) open$dir(&(0x7f0000000000)='./file0\x00', 0x9c100, 0x89) 04:56:19 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r26, 0x4) 04:56:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) socket$inet_udplite(0x2, 0x2, 0x88) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 364.790903][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.800748][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.888243][ C1] sd 0:0:1:0: [sg0] tag#4477 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 364.898922][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB: Test Unit Ready [ 364.905671][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.915512][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.925476][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.935453][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.945489][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.955322][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.965179][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.975024][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.984916][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 364.994741][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.004589][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.014373][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.024204][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.034049][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.043800][ C1] sd 0:0:1:0: [sg0] tag#4477 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:19 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) 04:56:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400f2ff", @ANYRES16=r4, @ANYBLOB="01001600000000000000070000f47120eccabd42b0bce4b505d80056444a49c7779ba31498b0e0b10b5f8faeda68a8a7943d8c9d4a3e46f472da83d93c5043adc790172f9552c49f6aed667cc3e6e234aa42276ef11a79dc39781ee3f852f46b733f6b0e1bf9f7a5d30acd3903a3b8213fa3469ba17f6bf8b47a1e599d44901d37c6dd52cf24d2a094a12d56fbcb3fec25f6296102e345d45b1d96e4fc19fb2fe66c42bb5270e9d7696d5ae28328bbc4"], 0x14}}, 0x0) [ 365.155740][ T32] audit: type=1800 audit(1582001780.235:46): pid=11915 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=18 res=0 [ 365.243633][ C0] sd 0:0:1:0: [sg0] tag#4478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 365.254386][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB: Test Unit Ready [ 365.261390][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.271274][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.281112][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.291029][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.300863][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.310701][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.320523][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.330357][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:20 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 365.340199][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.350248][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.360085][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.369951][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.379801][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.389754][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.399599][ C0] sd 0:0:1:0: [sg0] tag#4478 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) [ 365.574971][ T32] audit: type=1800 audit(1582001780.625:47): pid=11924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=19 res=0 [ 365.749749][ C1] sd 0:0:1:0: [sg0] tag#4416 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 365.760465][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB: Test Unit Ready [ 365.767352][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.777371][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.787240][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.797068][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.806956][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.816784][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.826668][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.836473][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.846358][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.856170][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.866040][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.875871][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.889001][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:56:20 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) [ 365.898943][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.908956][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 366.019417][ T32] audit: type=1800 audit(1582001781.095:48): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=20 res=0 [ 366.094812][ C0] sd 0:0:1:0: [sg0] tag#4417 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 366.105622][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB: Test Unit Ready [ 366.112293][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.122189][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.132042][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:21 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 366.142028][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.152384][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.162505][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.172455][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.182319][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.192182][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.202052][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.211914][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.221776][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.231648][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:21 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 366.241492][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.251535][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.443017][ T32] audit: type=1800 audit(1582001781.515:49): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=21 res=0 04:56:21 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) 04:56:21 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2080, 0x0) fcntl$notify(r0, 0x402, 0x8000000a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x60001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_RM_MAP(r8, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x386, 0x5, 0x50, &(0x7f0000fff000/0x1000)=nil, 0xd4a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r14}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r11, @ANYRESDEC=r4, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES16], @ANYPTR, @ANYRESHEX, @ANYBLOB="2b62660bf31aef9e725bc401bbc4753476dd8cc2a052d4e6e07a1118187507f5126484b84b3847f5dad0d015ae583a8cc5fdf39a39b8f1fa1fff98fa0e787dde6790719f4006a62b97d4f20c0440aefffc6475398d29862583def77a7bf1c61923e9ced3bc792af2c8cb99db4e9686f4ea79c2d0f41f12b00d992d38a8ec117578235fffe8b159624a423938b12a31cf416f912253033b7dfb06865d", @ANYPTR, @ANYPTR64, @ANYRESOCT=r14], @ANYBLOB="0100000000000000000007000000"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) [ 366.851649][ C0] sd 0:0:1:0: [sg0] tag#4418 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 366.859737][T11948] batman_adv: Cannot find parent device [ 366.862357][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB: Test Unit Ready [ 366.874612][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.884484][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.894399][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.904654][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.914648][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.924782][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.934670][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.944524][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.954766][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.964778][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.974659][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.984627][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:22 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 366.994523][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.004355][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.014198][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:22 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) 04:56:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400e900", @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) [ 367.332868][ T32] audit: type=1800 audit(1582001782.405:50): pid=11956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=22 res=0 [ 367.488772][ C0] sd 0:0:1:0: [sg0] tag#4420 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 367.499452][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB: Test Unit Ready [ 367.506223][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.516097][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.526129][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.536040][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.546079][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.556058][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.565904][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.575855][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.585761][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.595759][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.605615][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.615634][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.625484][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:22 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 367.635371][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 367.645215][ C0] sd 0:0:1:0: [sg0] tag#4420 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c010}, 0x10008000) [ 367.855327][ T32] audit: type=1800 audit(1582001782.925:51): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=23 res=0 04:56:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=0xfffffffffffffff9}}, 0x10) [ 368.015498][ C1] sd 0:0:1:0: [sg0] tag#4421 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 368.026404][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB: Test Unit Ready [ 368.033025][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.042961][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.053145][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.063006][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.072845][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.082770][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.092615][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.102435][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.112319][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.122131][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.133043][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.142847][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.152729][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.162541][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.172367][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:23 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:23 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) [ 368.477082][ T32] audit: type=1800 audit(1582001783.545:52): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=24 res=0 04:56:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x10000) [ 368.557880][ C0] sd 0:0:1:0: [sg0] tag#4422 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 368.568804][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB: Test Unit Ready [ 368.575570][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.585497][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.595508][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.605529][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.615425][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.625278][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.635178][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.645021][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.655416][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.665301][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.675215][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.685255][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.695177][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.705010][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.714936][ C0] sd 0:0:1:0: [sg0] tag#4422 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 369.212942][T11991] IPVS: ftp: loaded support on port[0] = 21 [ 369.479656][T11991] chnl_net:caif_netlink_parms(): no params data found [ 369.818617][T11991] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.826049][T11991] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.835982][T11991] device bridge_slave_0 entered promiscuous mode [ 369.890021][T11991] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.897442][T11991] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.907216][T11991] device bridge_slave_1 entered promiscuous mode [ 370.023168][T11991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.069863][T11991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.166410][T11991] team0: Port device team_slave_0 added [ 370.187534][T11991] team0: Port device team_slave_1 added [ 370.234962][T11991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.242124][T11991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.268662][T11991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.284952][T11991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.292017][T11991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.319194][T11991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.431107][T11991] device hsr_slave_0 entered promiscuous mode [ 370.465246][T11991] device hsr_slave_1 entered promiscuous mode [ 370.514249][T11991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.521884][T11991] Cannot create hsr debugfs directory [ 370.798993][T11991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.884239][T11991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.963223][T11991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.012065][T11991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.241670][T11991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.276197][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.285362][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.307570][T11991] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.324871][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.334942][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.345761][T11556] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.352976][T11556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.421348][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.431005][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.443416][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.452869][T11556] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.460147][T11556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.469368][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.480802][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.491910][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.502412][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.512799][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.523652][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.534436][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.544282][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.561487][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.571747][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.581469][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.597933][T11991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.645013][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.653007][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.677761][T11991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.728645][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 371.738807][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.787085][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.796943][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.815594][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.825828][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.855230][T11991] device veth0_vlan entered promiscuous mode [ 371.889107][T11991] device veth1_vlan entered promiscuous mode [ 371.953607][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.963098][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.972526][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.982285][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.017428][T11991] device veth0_macvtap entered promiscuous mode [ 372.042193][T11991] device veth1_macvtap entered promiscuous mode [ 372.073287][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.084761][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.094770][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.105285][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.115238][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.125760][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.135716][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.146242][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.160093][T11991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.170377][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.180324][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 372.189774][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.199833][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.229782][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.241211][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.251267][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.261810][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.271768][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.282302][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.292267][T11991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.302843][T11991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.316602][T11991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.335323][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.345370][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.627103][ T32] audit: type=1800 audit(1582001787.705:53): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 04:56:27 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) 04:56:27 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:27 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$bt_bnep(0x1f, 0x3, 0x4) dup(0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc2) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) r10 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') getsockopt$netlink(r11, 0x10e, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="8f896a3414210000b438b8ee6bdaf4516d11b0ae8090c50e6547dc5a0504deef2d7567b3553791d14e48625b571c43a483bfec00e995e494208e41f6a4c7487fe6e26bac2a2c1f323dfa99d5cdbfc8b7edc7154e07080000a4fe1fa134e75171e2a0892df2d348819094d03587bc145410f453a822fdfadb30dc9dd00c941067b401b2dc90e31de79e529e432aaa43e3c13c64f395ea5c519c1bb7a45d30fc54fba0c35c4ffb74479a2767e713245215bd46f9c5db05cd3c413bb74709d4505cd97738756cec85a19261af7a9278b9b31801277db18bd6629c8fc70c447fc430c9f5", @ANYRES16=r12, @ANYBLOB="0100000000f4ffffffff06000000"], 0x3}}, 0x0) 04:56:27 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) [ 372.783464][ C0] sd 0:0:1:0: [sg0] tag#4424 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 372.794144][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB: Test Unit Ready [ 372.800764][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.810703][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.820704][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.830591][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.840439][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.850279][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.860109][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.869928][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.879809][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.889648][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.899501][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.908509][ C1] sd 0:0:1:0: [sg0] tag#4425 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 372.909319][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.919764][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB: Test Unit Ready [ 372.929429][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.935998][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.945670][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.955454][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.965077][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.974773][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 372.984217][ T32] audit: type=1800 audit(1582001787.955:54): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=25 res=0 [ 372.993041][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.023031][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.032873][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.042808][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.052634][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.062568][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.072386][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.082207][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.092118][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.101932][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.111736][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.121681][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.338794][T12016] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 04:56:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x2c}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_NMI(r9, 0xae9a) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xa0800, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x9}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x50, r11, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x200000000000011, 0x3, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r15, &(0x7f0000000240)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r15, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010800"/18, @ANYRES32=r18, @ANYBLOB="000000000000000034001680300001802c000c801400010000000000000000000000000000000000140001000000000000000000000000000000000004001400"], 0x58}}, 0x0) 04:56:28 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 373.615455][ C0] sd 0:0:1:0: [sg0] tag#4426 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 373.626197][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB: Test Unit Ready [ 373.633012][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.642990][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.652922][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.663073][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.672991][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.682977][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.692886][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.702964][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.712924][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.722899][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.732916][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.742892][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.752820][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:28 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:28 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 373.762806][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.772715][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:28 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) [ 373.911242][ C0] sd 0:0:1:0: [sg0] tag#4427 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 373.921912][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB: Test Unit Ready [ 373.928787][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.938757][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.948708][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:29 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 373.958671][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.968564][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.978525][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.988398][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.998360][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.008291][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.018256][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.028279][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.038155][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.048051][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.057951][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.067809][ C0] sd 0:0:1:0: [sg0] tag#4427 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.133029][ C1] sd 0:0:1:0: [sg0] tag#4428 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 374.145105][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB: Test Unit Ready [ 374.151726][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.161625][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.171454][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.181328][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.191361][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.201195][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.211121][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.220951][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.230888][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.240718][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.250541][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.260354][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.270287][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.280095][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.290004][ C1] sd 0:0:1:0: [sg0] tag#4428 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:29 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:29 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:29 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r24, 0xffffffffffffffff, 0x0, 0x1000007fffeffd) 04:56:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_dccp_int(r5, 0x21, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = socket(0x1e, 0x7, 0x6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r7, 0x1}, 0x14}}, 0x0) 04:56:29 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:30 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 374.979862][ C0] sd 0:0:1:0: [sg0] tag#4429 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 374.990535][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB: Test Unit Ready [ 374.997379][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.007246][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.017356][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.027205][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.037133][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.047182][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.057007][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.066896][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.076773][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.086618][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.096675][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.099148][ C1] sd 0:0:1:0: [sg0] tag#4431 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 375.106488][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.116994][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB: Test Unit Ready [ 375.126708][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.133188][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.142930][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.153025][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.162702][ C0] sd 0:0:1:0: [sg0] tag#4429 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.172400][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.181282][ C0] sd 0:0:1:0: [sg0] tag#4430 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 375.190860][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.201835][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB: Test Unit Ready [ 375.211598][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.218253][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.227949][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.237761][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.247537][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.257308][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.267034][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.276741][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.286819][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.296497][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.306293][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.315991][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.325656][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.335456][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.345122][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.354838][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.364491][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.374199][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.383802][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.393608][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.403292][ C1] sd 0:0:1:0: [sg0] tag#4431 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.413001][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.431401][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.441243][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.451182][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.461071][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:30 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r24, 0xffffffffffffffff, 0x0, 0x1000007fffeffd) 04:56:30 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000c5891cdc8601f7a54b0766e632be79ae2cbbde1ac3bf814bbdf9d9f111552b61bc428e96c84a5371818d07ee6672eb3fdd28d54213bb6569ba7b901412fefd9100c1325425b91ea5bf018a", @ANYRES16=r4, @ANYBLOB="0100630fa48018ce477dd3106800"], 0x14}}, 0x0) [ 375.709774][ C0] sd 0:0:1:0: [sg0] tag#4432 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 375.720457][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB: Test Unit Ready [ 375.727233][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.737096][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.746934][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.756903][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.766746][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.776585][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.786421][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.796259][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.806091][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.815922][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.825781][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.835632][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.845583][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.855403][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 375.865332][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:31 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:31 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:31 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r24, 0xffffffffffffffff, 0x0, 0x1000007fffeffd) 04:56:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:56:31 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 376.519710][ C0] sd 0:0:1:0: [sg0] tag#4433 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 376.530474][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB: Test Unit Ready [ 376.537220][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.547301][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.557274][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.567127][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.576980][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.586827][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.596652][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.607142][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.617093][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.626918][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.636773][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.646610][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.656473][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_dccp_int(r2, 0x21, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) 04:56:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 376.666449][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 376.676384][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:31 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r24, 0x0, 0x1000007fffeffd) 04:56:32 executing program 1: socket$can_bcm(0x1d, 0x2, 0x2) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) geteuid() r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:56:32 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r24, 0x0, 0x1000007fffeffd) 04:56:32 executing program 1: socket$can_bcm(0x1d, 0x2, 0x2) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:32 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) 04:56:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') fcntl$setsig(r0, 0xa, 0x19) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) accept$phonet_pipe(r7, 0x0, &(0x7f0000000000)) 04:56:32 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r24, 0x0, 0x1000007fffeffd) 04:56:32 executing program 1: socket$can_bcm(0x1d, 0x2, 0x2) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 377.940681][ C0] scsi_io_completion_action: 5 callbacks suppressed [ 377.940809][ C0] sd 0:0:1:0: [sg0] tag#4452 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 377.958374][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB: Test Unit Ready [ 377.965110][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 377.975070][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 377.985042][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 377.994884][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.004734][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.014620][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.028217][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.039469][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.049324][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.059282][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.071926][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.081777][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.091646][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.101498][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.111359][ C0] sd 0:0:1:0: [sg0] tag#4452 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:33 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) 04:56:33 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) setsockopt(r3, 0x3, 0x101, &(0x7f0000000000)="c9abc44dc8beb28a06cce8e9892766cb33ab6887da4d0c4f7c9344cb800873cd3f489507153ad8c6b83f1cdb22f23eac96e2b8cb90116d4703d8b14392c84cb96e6afdc62e1d445b62f3be18a41b45b45691c6c7442452474b506d89c4cc6075c9c8f61965f4340e2730693bcbead28fbc79af95b2a1c6983eeb0a07", 0x7c) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r15}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x50}}, 0x0) r16 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f0000000200)={r13, r16, 0x6, 0x7f, &(0x7f0000000180)="0e7345a0fea3e6c92f46615718b0d262dc7a26804bd9af816af778278f05cb5bba4f2b924d5cce5ad9bf509f0a7768789cc88e3f84b90236e593dfec441d0703c675b838ff85d0db9366efd9fd896d22ffc82273293c695e5b7bc658d0f06621471e53c7d2a8f964c536203006b17d8646523f3f3854de6e871d29200c763a", 0x90, 0xf9, 0x1, 0xff, 0x8001, 0x6, 0xfffffffe, 'syz0\x00'}) r17 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f00000003c0)="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", 0x16a}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$KDGKBENT(r17, 0x4b46, &(0x7f00000000c0)={0x3, 0x40, 0x800}) 04:56:33 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) [ 378.607696][ C1] sd 0:0:1:0: [sg0] tag#4455 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 378.618688][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB: Test Unit Ready [ 378.625523][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.635365][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.645283][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.655174][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.665058][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.674883][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.684841][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.694807][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.704667][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.714514][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.724347][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.734349][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.744344][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:33 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) [ 378.754184][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.764170][ C1] sd 0:0:1:0: [sg0] tag#4455 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.785218][ C0] sd 0:0:1:0: [sg0] tag#4453 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 378.795859][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB: Test Unit Ready [ 378.802537][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.812533][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.822444][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.832303][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.842159][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.852049][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.861908][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.871774][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.881626][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.891614][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.901501][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.911796][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.921671][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.931522][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.941369][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.950320][ C0] sd 0:0:1:0: [sg0] tag#4454 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 378.960949][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB: Test Unit Ready [ 378.967650][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.970258][T12149] batman_adv: Cannot find parent device [ 378.977503][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.992931][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.002803][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.012667][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.022515][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.032545][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.042391][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.052308][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.062272][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.072122][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.081970][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.091800][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:34 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x40}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 379.101680][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.111521][ C0] sd 0:0:1:0: [sg0] tag#4454 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:34 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r24, 0xffffffffffffffff, 0x0, 0x1000007fffeffd) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 379.294248][ C0] sd 0:0:1:0: [sg0] tag#4456 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 379.304941][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB: Test Unit Ready [ 379.312531][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.322443][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.332295][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:34 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) [ 379.342129][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.351982][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.361830][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.371757][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.382006][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.391864][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.401707][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.411560][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.421407][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.431254][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = fcntl$dupfd(r2, 0x406, r5) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000000)={0x2, {0x9, 0x3, 0xf16, 0x5}}) r7 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="955366efe96ea0a9b34618e4140000007d66229a791ec66da8e368599351ffad1bf2dd9b8d", @ANYRES16=r9, @ANYBLOB="7aac76fed1428e29c2179cf04e1f5deed9e2e9e6867519fc69b5be25eb24b06e2e25b0553a93ef8ad1fce2128b3423e725bd73f7c4678bfcf7369280cd7ebb315f280dfb3cf6ed7eb8cfdc96c4a2472bf655ce1c9033bd036bad5eb827b3f3542c84fe113904f24736f9cf5ffee5cc323314ad96d9d12361e22219cd4eb3bef54a9d663ce5ad9dba276d4b0f4257b1206861af6cdabfaa178064a601a10ad7ed6bce"], 0x14}}, 0x0) 04:56:34 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) [ 379.441229][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 379.451089][ C0] sd 0:0:1:0: [sg0] tag#4456 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:34 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:34 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r24, 0xffffffffffffffff, 0x0, 0x1000007fffeffd) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:34 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$sock_SIOCGIFBR(r15, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r15, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) fstat(r0, &(0x7f00000009c0)) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r16 = accept4(r2, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007fffeffd) 04:56:35 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 379.973669][ C1] sd 0:0:1:0: [sg0] tag#4460 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 379.984421][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB: Test Unit Ready [ 379.991050][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.000946][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.011264][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.021299][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.031125][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.041004][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.050966][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.060867][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.070898][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.080795][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.090601][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.100495][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.110331][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\x00\x00'], 0x14}}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f00000000c0)=0x80) [ 380.120185][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.130215][ C1] sd 0:0:1:0: [sg0] tag#4460 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:35 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 380.330098][ C0] sd 0:0:1:0: [sg0] tag#4457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 380.340770][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB: Test Unit Ready [ 380.347505][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.357413][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.367340][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.377191][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.387034][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.396878][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.406708][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.416544][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:35 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 380.426402][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.436278][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.446126][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.456013][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.467580][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r5 = getegid() chown(&(0x7f0000000300)='./file0\x00', r4, r5) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000002c0)=@get={0x1, &(0x7f0000000200)=""/147}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r3, 0x1}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x2000001, 0x40000012871, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) fcntl$setflags(r13, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r14, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x81) [ 380.477482][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.487309][ C0] sd 0:0:1:0: [sg0] tag#4457 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.496261][ C0] sd 0:0:1:0: [sg0] tag#4458 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 380.506883][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB: Test Unit Ready [ 380.513502][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.523354][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.533193][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.543035][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.552865][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.562703][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.572548][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.582363][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.592320][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.602168][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.612295][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.622148][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.631970][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.641834][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.651705][ C0] sd 0:0:1:0: [sg0] tag#4458 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.660645][ C0] sd 0:0:1:0: [sg0] tag#4459 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 380.671272][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB: Test Unit Ready [ 380.677971][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.687891][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.697727][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.707571][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.717406][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.727380][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.737324][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.747210][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.757036][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.766866][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:35 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r24, 0xffffffffffffffff, 0x0, 0x1000007fffeffd) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 380.776752][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.786695][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.796664][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.806625][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.816647][ C0] sd 0:0:1:0: [sg0] tag#4459 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.825899][ C0] sd 0:0:1:0: [sg0] tag#4461 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 380.836510][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB: Test Unit Ready [ 380.843298][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.853188][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.863087][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.872919][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.882826][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.892712][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.902686][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.912526][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.922436][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.932492][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.942398][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.952347][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.962352][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.972192][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 380.982098][ C0] sd 0:0:1:0: [sg0] tag#4461 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:36 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$sock_SIOCGIFBR(r15, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r15, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) fstat(r0, &(0x7f00000009c0)) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r16 = accept4(r2, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007fffeffd) 04:56:36 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:36 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r24, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80048020}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x98, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xa266}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x15}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x54, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @remote}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, "ce6800a958e0b355ad8f8763d819a6aa91ede64818d91e1433782b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x23, 0x1, "e8b63480b67b0c614c363cc84f0ee70bb5ff280e39d10f9085a5044f008da3"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x40}]}, 0x98}, 0x1, 0x0, 0x0, 0x14}, 0x20040050) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r6, 0x1}, 0x14}}, 0x0) 04:56:36 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:37 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:37 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r24, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r5, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x891}, 0x400b1) 04:56:37 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$sock_SIOCGIFBR(r15, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r15, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) fstat(r0, &(0x7f00000009c0)) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r16 = accept4(r2, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007fffeffd) 04:56:37 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:37 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r24, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xe0, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="f0da6d3b8bdcc35baab78e8fa74b643c"}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x7f}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0xa77}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x84}, 0x20000014) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:56:37 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:37 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:37 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) iopl(0x7f) [ 383.051498][ C0] scsi_io_completion_action: 9 callbacks suppressed [ 383.051651][ C0] sd 0:0:1:0: [sg0] tag#4475 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 383.069473][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB: Test Unit Ready [ 383.076290][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.086307][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.096208][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.106049][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.115883][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.125720][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.135548][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.145372][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.155204][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.165041][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.174849][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.184764][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:38 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$sock_SIOCGIFBR(r14, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r14, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r15 = accept4(r1, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r15, r16, 0x0, 0x1000007fffeffd) [ 383.194589][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.204495][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.214561][ C0] sd 0:0:1:0: [sg0] tag#4475 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:38 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 383.401781][ C0] sd 0:0:1:0: [sg0] tag#4476 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 383.412541][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB: Test Unit Ready [ 383.419284][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.429117][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.438943][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.448842][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.458657][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.468479][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.478379][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.488190][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.498029][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.507855][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.518799][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.528636][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.538467][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r8}}, 0xc) 04:56:38 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 383.548297][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.558118][ C0] sd 0:0:1:0: [sg0] tag#4476 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.778448][ C0] sd 0:0:1:0: [sg0] tag#4477 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 383.789159][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB: Test Unit Ready [ 383.795916][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.805859][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.815883][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.825855][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.835703][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.845545][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.855386][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.865337][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.875163][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.885000][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.894859][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.904682][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.914499][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:39 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:39 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 383.924368][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.934201][ C0] sd 0:0:1:0: [sg0] tag#4477 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:39 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x104, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x25772bee}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r7, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r8 = socket(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x57, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r9, 0x20, 0x70bd27}, 0xfffffd67}}, 0x4040004) [ 384.213292][ C1] sd 0:0:1:0: [sg0] tag#4478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 384.224039][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB: Test Unit Ready [ 384.230690][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.240564][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.250374][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.260288][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.270220][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.280228][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.290065][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.299938][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.309922][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.314108][ C0] sd 0:0:1:0: [sg0] tag#4479 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 384.319768][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.330137][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB: Test Unit Ready [ 384.339845][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.346409][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.356082][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.356192][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.366064][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.375691][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.385525][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.395214][ C1] sd 0:0:1:0: [sg0] tag#4478 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.405025][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.433311][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.443162][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.453011][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.462866][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.472815][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.482669][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.492622][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.502494][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.512337][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.522188][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.532127][ C0] sd 0:0:1:0: [sg0] tag#4479 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:39 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$sock_SIOCGIFBR(r14, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r14, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r15 = accept4(r1, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r15, r16, 0x0, 0x1000007fffeffd) 04:56:39 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 384.798342][ C1] sd 0:0:1:0: [sg0] tag#4416 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 384.809011][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB: Test Unit Ready [ 384.815923][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.825815][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.835878][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.845776][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.855676][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.865575][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.875461][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.885376][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.895255][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.905147][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.915012][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.924879][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.934772][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.944674][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.954607][ C1] sd 0:0:1:0: [sg0] tag#4416 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:39 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$sock_SIOCGIFBR(r15, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r15, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) fstat(r0, &(0x7f00000009c0)) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r16 = accept4(r2, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r17, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100805100000000000007000000"], 0x14}}, 0x0) 04:56:40 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:40 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 385.448691][ C1] sd 0:0:1:0: [sg0] tag#4418 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 385.459543][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB: Test Unit Ready [ 385.468199][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.478029][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.487914][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.497795][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.507739][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.517582][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.527738][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.537565][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:40 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 385.547399][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.557226][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.567052][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.576875][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.586704][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.596519][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.600858][ C0] sd 0:0:1:0: [sg0] tag#4417 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 385.606341][ C1] sd 0:0:1:0: [sg0] tag#4418 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.616826][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB: Test Unit Ready [ 385.632829][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.642893][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.652825][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.662804][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.672812][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.682689][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.692729][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.702739][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.712656][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.723025][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.733020][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:40 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$sock_SIOCGIFBR(r14, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r15 = accept4(r1, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r15, r16, 0x0, 0x1000007fffeffd) [ 385.742999][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.752912][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.762936][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.772863][ C0] sd 0:0:1:0: [sg0] tag#4417 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.817754][ C1] sd 0:0:1:0: [sg0] tag#4419 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 385.828525][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB: Test Unit Ready [ 385.835440][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.845312][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.855313][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.865208][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.875129][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.885079][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.894959][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.904847][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.914834][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.924763][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.934770][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.944651][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.954609][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:40 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$sock_SIOCGIFBR(r15, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r15, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) fstat(r0, &(0x7f00000009c0)) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r16 = accept4(r2, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r17, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 385.964619][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.974586][ C1] sd 0:0:1:0: [sg0] tag#4419 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r11, r10) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000300)={0x990000, 0x10, 0xfe, r11, 0x0, &(0x7f00000002c0)={0xa10906, 0x2, [], @value64=0x8}}) getsockname$packet(r12, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_MASTER={0x8, 0x11}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) r14 = socket(0x10, 0x3, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r14, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r15, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r15, 0x800, 0x2, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_EVENTS(r16, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0xb, "ec3787df2e4752be4a"}, 0xb, 0x1) [ 386.221541][T12332] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 04:56:41 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:41 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:41 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 386.530916][ C1] sd 0:0:1:0: [sg0] tag#4421 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 386.541688][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB: Test Unit Ready [ 386.548612][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.558550][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.568707][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.579407][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.589351][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.599248][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.609189][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.619090][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.629117][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.639015][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.649066][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.658959][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.668935][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:41 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r13, 0x0, r12) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r14 = accept4(r1, 0x0, 0x0, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r14, r15, 0x0, 0x1000007fffeffd) [ 386.678842][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.688836][ C1] sd 0:0:1:0: [sg0] tag#4421 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:41 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$sock_SIOCGIFBR(r14, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r14, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r15 = accept4(r1, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r15, r16, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r16, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 386.933424][T12336] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 04:56:42 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xad3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:56:42 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r24, 0xffffffffffffffff, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:42 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) 04:56:42 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:42 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:42 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r24, 0xffffffffffffffff, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:43 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$sock_SIOCGIFBR(r14, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r14, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r15 = accept4(r1, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r15, r16, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r16, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000001c0)="a71a6d50a9401682764dc6004d0d10dbc111771b5f3630c765da2300e35e4bb4946e1576543bec2a3f04757203c764b4683fe1c96c4f3f85640392991c0f607a8a5a38d1b7433158098fbe1310b0b9327f8b928b218a054a06b0936b1f208cbb8df9f3d70e48fed59ff33292a28e27d424cdb0e2d747c5e82ab4ca55b4b12146250d3cc724bdb17958797114844b717a01da951ff83b6acd38309c37021aaeab7a4848d406d784c084bc183022aa7b37e3f9b260dbf680f2413c748e87e5482d7ae77eaa6a923294efbc", &(0x7f0000000100)=""/8, &(0x7f00000002c0)="5e20cf756b486f3363ef365ea14c45eb8ea0617a1b0ccf59373e1b8d899b2b018d3f3b1e0011c4adca0d418ed4723a7ddf77d1b18241d15a8b865ac5e00b65208b8af061a15a23e8de725afcf2e1a368915a6ffe63c54bc2864d516f85590190360a25aa01fbf0da2c893a560b928f48cca26b6c5b946557c653c2ad6788a867bbc922684db0ae98945dd4c69c6f0b6abf7510f0", &(0x7f0000000640)="d46667b106f0e165ec2c360d379ee36c5f50447021cc76a3106a36e450acbfc382651020fce1e9de866c23ed3f7cbdcfe4823df970c48745a75c8bce67475564e9ec167ede0132774e8f943f9d87527196f2e62117c3130bf165c3de5b7e1fa5e5e29643aa674d1f2d6a10ad5c1201d71e9e62a82e14a8f797e396a3907c4eda9cd9ad9e2364d96a60ad44728ae79341c32be651212628ae6bc8cdbfc51d4a6d7153e60b4c884cbd378c23c3cd38140ef773b7eae17362dc736959fcb7da0a29b856dba2a252950c94cd9523e810636ff4efaad6aad027751ce283d37a0c20a4b3e7820510a4eaf4710b811299a5baaac549edcfa0721b534f81281acca8643325e65a5d21d3ac4bcd7c379070260c1b13af896894653c95f95b41ad62728b0dab63c5b674e9302a0b4f4b00519feb452786f8a93c0c426368e0a5f4a582ad15d974405009207db9c433ef17eff14da06a9a80829dff8dee0447836b4ee58628108a2478c3a5eae82fbe15a5b6a24407cf9aacebf85c8993453ba6d7d21ac47b309810772d7a8622f97178b69bcbe71b12cd75e5a03e1384e5a9f61879626b53c67f431773cca15f91647a2d9bbb9d3dafaec8749231d079371e0ace2d606ba8fdb36238f303f8f73a9338cf6800493e8ca78d3a44ee97809a342f0f3ef4e0bda7330b385f46fb28025b1da2d38cd0cd6fc02910d982de67d4e9dc3394db7615364ca3b2b0abd73bded9718abb26cc4c119740574f037615dd27eb35f43572cfa26101f9edee66cdcc0380ecae5e63653a349e1cc2067879f7aebbb85be504430c7a48a611c5b4a91f32030d42553146aa374906ed792ce8793944e0f344a02106d24b86737f647a1b3a55ba0a3251e57855fa46443a49fb5266a365517565c66ce0bba9cde13a0f006828e5548feaa8fd6d91803bb4bf2d7f8540e0fdf12fd007294b54e7d3b5611379e894a0cbd30146ada05ada86d792c45543d6abba61831f45f273dce051fee447cc67e02f388a475f5b914c9bfa8fdad137c84cb6dae5173a45b19e1d58f82edfa7baf6d236a3e88d842d5e87f466f1d01ae3bf1ef9422155cb7699263f15f4f8acaa6ba8e96d88ed36852512884ba538d62964c64f85a3ed3ae2a9e40f0be2724ad34657a566bf4c37abc9156482af4fd7fbf8ce02164dbc39aec0acfbe98478c0545e168fca8cf949e9182c18032b474ccfb6a688572c04946bd999c5f964b0cab407005fb4d18f3ae0ebb0145dd55de7b72c9640fd493e0c6f2f7565554b9e66f4043dba8c4d658af8b50f45a3f0a55dce6801a4c31c3dbe9ba1b96e84616f9c2fd24a91996a88ace85475c2b9a896e5377926f3e48b6b256400c56e0750d9faf978f0c1301dcc31eacf6674973a8a1f9e82a4aa682357d7890bd3bef4015387d39333d2edb38d1fe5efb1a13ea124f8211c6226fd232ca4f8f9ffe785cb6bfdb69e5d5ba8f1e9ca5ea76a9f7734ffc6da0bd651e720eb252a881e0ac3dedd073f2aad04dc2c30277fd14165aa40118289c826144c9acb8597f1c53e66decdf1aa87c99c71d776cd13309f13d0d361ab5530d42cc51630abf994f068f7dd9dd108f582f399ef6d5be46e50afa22050e5bee979d00215d28927ce527de1615649961590fb7a31e75ace76a7ee5c030657c2d90981c606950c9bbd69b964d5f4b2a0239a484ffa6544ac15cda1e7bea5509074726c976cb50e2067b8efddf4fe50ef69cb0c6b3986b16a9f4ac0c16ef33f4c6fdeb72e11d875fecc097574ff6270732d6c4ca7d6b4d8123eca013d79413384c4c303da17fee207b9a413b5b78ab898ecef646caac4877e7fd191acda0f42a97000e07bede35ca73ff96983be0067a709436198477c7c72c583ade49416a653f604931c1671e2c69c2a3a938ae7cb785bffcafdd91ff8e31fe62c2f37f9b0b1c9800cbec7a2ec67396fb507c8800c17fe1942b4b34db5d10c1d3c0d2fb4c735ce45089786294f05c97e5b91146b242c158fe0904f4d7e523d32d52d303951416518a649376b951b7a729173d5c45bb5d869d30ec0507e25c8d56de4ab22c46846acf174538fd01e46dac6069788595791d3273d27a695fad07c16c53adcb57d85a9c855a946f6e1e0049f0b5fd4e8438a296a04949bd02b0e11ac66195d31d875d23069e5955079ccac4e62ad167106cf565d6e62c3e7367c7b5ebc4b9cc132bfe0d4f0d7d0298744eed9e286d508ba993230fd481fce2c0db391a30ede9ee94cb4ac84f01e0687458377af381be93a87c8f246aa3657d1783e68dcb78208e8db82fcee297d17f2e3076cf89b34af4f0e2429fda8920194d1d9e6e9068f5a17ee4f0063a0d8773eef16e01aeb37f3f1e3d32134c8aea820462e299ba396f5ed532adb7a5bd4e570177b99b3fb22e4d80b028a7dbf057fc5bb8e4265d481198b89042fea3e6c49131630cc4b817d2abaeb3a45e0e1af743f6ef57ce7577d4643d062d63c0fb0ce644d4e5d781c8473cb0d8123fa3d04146c89cf61a312b796c14d0bf0719aa0368e94c776825bcbfd5473bd212ace2a4166466e930c07fda6e5783bedc92471e34eef6c5953ba9c8c2afdcb4b0e77893ac8d205af47d6c5217799506041d6bd1d9a35832790067e52cc56995b8339c831445146c1f0f16ca0aefd8aa209448c3d10768bf31f666f1bf5d73feea7b2b0fc97c375b34707ddde204feea017e10439408e3a5da5ea6d36645a4fe748e01c4b3dc19dfb7430918be9f676ef38a6aa74454b81c1b3836f0f51ec1d27b49953b8055644abd0acabd3ad5917c05120ac6cb93570950ae5e19817a5ccb9e238f43d5630523efcff48b3f9fff3d1cc0a31b43dbdca8691527ba95cd2b0f225898e030b97227b8eb16dc5d8e3b4ca5b65d2208fde1b4236676d6c6f2b211ab1c119c5fe6402ac22a51f344400643275ba9f4888400c742b95615538b99f79156fba6cb3cb0532942f701912d3c621f5546d6a1acc71100f1cbe09aca10355f5dda7e82cace2e941ee3757c79f860241198941fdf1a0a86f0662726f045bf905cd2bc3ba8cd4473fbc28a2dad5ac2fc677db3840859d57391c1098775280ece836b03147f31fdd6c848857821807d3d766e6a391c0394c33901acb12b2e8bc996efd7bec84b35d79368c57ead3e90b5031b1459b0cc23c46055bfbe1d2821568e421413d931c599c9940f88666a62f59baaf332d6c106d2933f33a96cd2127997ab352fb6ce6662a284869fc87ae2a4dfa6ffe1b8731d577b19546d1da6d328a60e598db1d208017b881f8f6735a0b591d0b2cdb2f304d2e9fd0d91f7e464514242edeb77dbdf4cca8dba5259a90dc89c63d1eb902287e4e18a23b2793f7c05ef969d9f4e92e1523c6b38056b79275ef9513357df42365440deb8bca85c0b1d16c5af0876b84acb06dad48ebabf2241d76b07ab227e52701dc49529fa621baa64fb1a30a4535e52eff3e8731c8b3c2c2a6544b66ca1bb0e4ebd655ad1b748a0c9f972bf5d7822a3e9f30c8c99d55f20126ac0ef17777d3c3e951822f29c290be012e480910c0094323e37b4ad07299f76d1e62d078f0c2440ad0a453d54eee0f7506ecf4cb68859ebbbedd300dbc59cd43eff99d7c2d9aea99379a551aae62c4a0b274545f3202822285429fe99bbf5237cc9ece4bb32b65f850989dc22c3c434d5b615d2e6d2d4d7653c9d91250125046d86c9c82044f4748523878d68cb56617c949b6db7eb72fbcde7b1fdb5e52263119f9b80f2c647d903323ac78d14337095b129980a0450a6441308c2fb8356b70b4e33094e0af4212c2e5028b240894d7e26445b8597a5771f65b2666c7160f13bacc707c564502ed08ea29351ea89f698f80f749b35c9f1b429ef4331eb6a396e0941c9580f130a012a0cc25965abf2de9669ac6beb78feb8b2b57db59880799396fcea667f92653bc5bcecbbc5bd0a79e6555ef555d46cd6153bd5aa92554f61897ad2e179b15b887d18f19ca56c7cbbfdb7d51daa7d176f1226d3f26ff9475e64d81179b7808de1e661422ff03a474780a31eba550c5a5f0d6ff43f286f7f38088ce6e9b976140b1e997fa3ae98d0499d3d883e82e778fb14fbf2601d9afd515e5d0e7b1f568c502af568d0ee8b30bcaf517d98f441cfe88299606842a6143363741cacecee5da3d61aed374cc599a4f6b60ee88ac581db7e7809267adced2f69c666e36a792faad1dee1e26261078edaeb69e92790bb66e5fa2bcaa0d3db29e0d741baef86a8ba70d23b4e4ef22fe8668ffa142315fdee9fd4bbf4ab4d170a89c8d80eec093d83e2bd17895ffd8b93d44b5038c96f864dbed24818d7e0224f2052f71a03a481d220f6f31e5b6c5eb210e6f3058553b4681516ee40ccb7c73dab153f5249d9022f9204c2fd0e500c3beef5d4121df9ceb5a683787bbf671c2d6498222ade95a964a44ac4d3201fbfee0755336f33953201de2f65353082d7cfd3650051dd2c8af2907696e89c57a614a6a4402ea3417ee07a299f14d601f80aa9941ca05f43c6d9626ebc343c878bca59365aff71b4538a41674ffe5c5133206ebee653ecff4aa5530bd0c47cdc4981bac78e42666637076cdf94d714d582a71a6bde3030f0a3fd91ad77300e21699c5378d1561b85cabbb343cdbea5060d6e1b7fce051844321c4eb886fc7de8cb4d5ed54e7fa45328a346591998fa4139286adc00c488e83014e0522422a2ce891a5ea4ee3ce3f558bbb16428de7894da6803ea3f02289f64ee64e76043fcbf966da747712adb4891c4e50fba5b8d77e3a328c96c53b473358472834f3e38b9d0f272c38d880f4b6bce9079f557386f814958ea36bd209f1daf1adfbc0aa1ad3ec587b882aadef49b9d29746906d1d3a60afcb82e07bf21235541cc498f5f1d5988adc84e61bca9a2d43956ade493bbbf94473020047595cf6223b10aee873c9ac06de6ed693b55ea6f91556bee6f7a3da7dec9429d98f2b6620cc5a08352458231f887f4c271f0d93686f205b9e61254cd006025be346939a0d6a07b1a844eab04242a6848ca9a2fb08447df01c95b182503c5c8b8e8d3fe0a82283b8bf9f1d01413d4b52865444f160f0c1cd4f68df869e1a05fddc38cafc98dfcb277d0a88d40e80dfe6218167e04b310dc0b9113ca10268f565d2418cc84720c991a59091bc7ee78f235b34ac0e466baac171e5b09015579dd912c812d9cb5838840b38721a2204bffcc10e4f722c5f92078c278ead9dab70acc83d1142d91ec616756ee0f8500c0ca3c018de6c9e8ba4808e67b3abe10dfe32d07660e472f0e39ce045399c6f98aaf6399a797ad8188f63b715f0c6e357e48ca95c6588ad6383df846159ed45c2ef7f5ef17d3309b9bea76855a503bc60538441648da4b954336423171dcae035b6f977287f37b18169ed76bb77f09b30a7e4548154f82bc651c5bde12ecc2fc82082f1f2feb5ada16ff40518c98fa7ff204f6190931d0b3864c2af6601a4be2c2f67b639e48630d4bbb677dee0698c0b60306a65a22bcbd4a1d49e45c6118f574ff0ab05cbc02dd8b95836b823186a3ff3d8b1df35fb1369add4ed5976557a643b6b196753cdf00ee6200d59dff258c6f4e185b85c35c0a264d2d3868e692215bd1d6052596093d5c47feef4a81385e7d248ebf3702594d27f870c2c77dbd81ae57e2687324aeb11455623d859ce2a13047dff2b756a27d4d9397e8a0249416b81917bf315371ff4f4f0fdbfc209b8c7a36a717027d250cd51b4983eed2fdf40476e4fdb92d03924327d9fdf10", 0x87a2, r7}, 0x38) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x22a081, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r15, r15, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) r17 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r18 = clone3(&(0x7f0000000380)={0x3000300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) rt_sigqueueinfo(r18, 0x1d, &(0x7f0000000280)={0x28, 0x0, 0x80000000}) waitid(0x0, r18, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r11, r12, r15, r16, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r17, r18, 0x5}) ioctl$TUNSETGROUP(r8, 0x400454ce, r12) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000000000700ff06000000a09032312ce7859cb3fe77058968b15487436d4b49fcc809a3f5863d181034a8bbe1ff7deb99d68b46b2"], 0x14}}, 0x0) [ 388.154145][ C0] scsi_io_completion_action: 6 callbacks suppressed [ 388.154273][ C0] sd 0:0:1:0: [sg0] tag#4430 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 388.171944][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB: Test Unit Ready [ 388.178828][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.188695][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.198605][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.208545][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.218401][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.228235][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.238052][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.247880][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.257757][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.267629][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.277475][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.287325][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:43 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 388.297154][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.306986][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.316812][ C0] sd 0:0:1:0: [sg0] tag#4430 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:43 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r24, 0xffffffffffffffff, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r2, 0x1}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000700)={0x8, 0x3, 0x4, 0x400, 0xeb, {0x77359400}, {0x1, 0x2, 0x8, 0xa9, 0x0, 0x2, "7f9b7a3a"}, 0x9a, 0x2, @userptr=0x1000, 0xfffffff8, 0x0, r0}) bind$pptp(r7, &(0x7f00000007c0)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xbba35de5ac1314c7}, 0x40000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = dup3(r5, r6, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="4e888f6bb67c7cd93b110274a69712ac3710ffb99f56508fd7883983190cc7722b5959d848f3315c8ab7a585531f7bf9e8f20146e13744e3290af68344db5eb06f45d4275740549529ac22c25234113beb5e229bdbad2fbb3552a6c09c63b0c8db5c85eed5592d3260d8e002c0a08390872e8d81c6067f84719be3cf893beb5d2bf6d19cbcaed6e53c5c7e340ada6d5b", 0x90) [ 388.595932][ C0] sd 0:0:1:0: [sg0] tag#4431 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 388.606584][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB: Test Unit Ready [ 388.613321][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.623229][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.633175][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.643048][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.652911][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.662878][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.672788][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.682642][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.692618][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.702443][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.712282][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.722282][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.732127][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:43 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r24, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:43 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 388.742068][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.752081][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:43 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) socket$inet_udplite(0x2, 0x2, 0x88) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) [ 388.956639][ C0] sd 0:0:1:0: [sg0] tag#4432 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 388.967294][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB: Test Unit Ready [ 388.974749][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.984663][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.994527][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.004445][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.014277][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.017669][ C1] sd 0:0:1:0: [sg0] tag#4433 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 389.024186][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.034648][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB: Test Unit Ready [ 389.044363][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.050834][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.060548][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.070361][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.080046][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.089731][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.099504][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.109199][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.118915][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.128605][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.138315][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.147995][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.157718][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.167392][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.177094][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.186769][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.196460][ C0] sd 0:0:1:0: [sg0] tag#4432 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.206153][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.224544][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.234344][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.244130][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:44 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r24, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 389.253926][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.263788][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.273803][ C1] sd 0:0:1:0: [sg0] tag#4433 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:44 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$sock_SIOCGIFBR(r14, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r14, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r15 = accept4(r1, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r15, r16, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r16, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 389.811600][ C0] sd 0:0:1:0: [sg0] tag#4434 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 389.822283][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB: Test Unit Ready [ 389.829062][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.838944][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.848848][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.858795][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.868691][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.878682][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.888603][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.898537][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.908435][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.918343][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.928298][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.938271][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.948098][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.957983][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.967803][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.976783][ C0] sd 0:0:1:0: [sg0] tag#4435 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 389.987527][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB: Test Unit Ready [ 389.994238][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.004140][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.014048][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.023854][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.033753][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.043602][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.053527][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.063367][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.075942][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.085905][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.095805][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.105683][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.115559][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.125436][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.135325][ C0] sd 0:0:1:0: [sg0] tag#4435 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.146857][T12417] IPVS: ftp: loaded support on port[0] = 21 [ 390.338838][T12417] chnl_net:caif_netlink_parms(): no params data found [ 390.425820][T12417] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.433011][T12417] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.442117][T12417] device bridge_slave_0 entered promiscuous mode [ 390.451457][T12417] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.458955][T12417] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.468043][T12417] device bridge_slave_1 entered promiscuous mode [ 390.500101][T12417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.513781][T12417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.543896][T12417] team0: Port device team_slave_0 added [ 390.552912][T12417] team0: Port device team_slave_1 added [ 390.577756][T12417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.585021][T12417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.611566][T12417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.625050][T12417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.632161][T12417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.658248][T12417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.729536][T12417] device hsr_slave_0 entered promiscuous mode [ 390.775236][T12417] device hsr_slave_1 entered promiscuous mode [ 390.814327][T12417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.821970][T12417] Cannot create hsr debugfs directory [ 390.951430][T12417] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 390.998736][T12417] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 391.061474][T12417] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 391.120058][T12417] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 391.208364][T12417] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.215749][T12417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.223393][T12417] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.230772][T12417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.307566][T12417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.326225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 391.337523][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.346390][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.363313][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 391.383692][T12417] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.397870][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 391.407892][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.417373][T11564] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.424673][T11564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.443471][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 391.453515][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 391.462916][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.470256][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.487423][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 391.503746][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 391.525708][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 391.536325][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 391.563861][T12417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.574912][T12417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.589045][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 391.597863][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 391.608770][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 391.619547][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 391.628925][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 391.638321][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 391.647681][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 391.665176][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 391.697722][T12417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.706352][T11557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.714521][T11557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 391.743445][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 391.753699][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 391.791644][T12417] device veth0_vlan entered promiscuous mode [ 391.799730][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 391.809716][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 391.821613][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 391.831061][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 391.850196][T12417] device veth1_vlan entered promiscuous mode [ 391.884495][T11557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 391.894412][T11557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 391.903126][T11557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 391.912771][T11557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 391.931296][T12417] device veth0_macvtap entered promiscuous mode [ 391.943769][T12417] device veth1_macvtap entered promiscuous mode [ 391.970292][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 391.983036][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.993083][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 392.003875][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.015960][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 392.026643][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.036569][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 392.047129][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.057180][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 392.068106][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.080813][T12417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.093695][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 392.103374][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 392.112186][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 392.121811][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.132369][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 392.142989][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.153055][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 392.166948][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.176965][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 392.187552][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.197558][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 392.208120][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.218226][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 392.228788][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.242472][T12417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.254782][T11557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.264440][T11557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.406979][ C1] sd 0:0:1:0: [sg0] tag#4436 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 392.417681][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB: Test Unit Ready [ 392.424454][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.434308][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.444272][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.454108][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.463850][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.473783][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.483628][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.493465][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.503311][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.513275][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.523213][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.533088][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.542934][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.552785][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.562620][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:47 executing program 5: 04:56:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xb01, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r9, 0x8004551a, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$PPPIOCGIDLE(r15, 0x8010743f, &(0x7f00000000c0)) r16 = socket(0x10, 0x3, 0x0) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r16, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r17, 0x1}, 0x14}}, 0x0) 04:56:47 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:47 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r24, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:47 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) 04:56:47 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$sock_SIOCGIFBR(r14, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r15 = accept4(r1, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r15, r16, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r16, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 392.749411][ C0] sd 0:0:1:0: [sg0] tag#4438 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 392.760110][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB: Test Unit Ready [ 392.766868][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.772013][ C1] sd 0:0:1:0: [sg0] tag#4439 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 392.776721][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.787279][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB: Test Unit Ready [ 392.797097][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.803695][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.813467][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.823241][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.832878][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.842612][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.852273][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.861975][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.871664][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.881376][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.891048][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.900757][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.910432][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.920404][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.930075][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.939776][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.949574][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.959264][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.968951][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.978731][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.988376][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.998101][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 393.007787][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 393.017515][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 393.027307][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 393.037024][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 393.055438][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 393.055546][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 04:56:48 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:48 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x50}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@broadcast, 0x4e21, 0x0, 0x4e23, 0x6, 0x2, 0xa0, 0x80, 0x2f, r7, r8}, {0x80000001, 0x8, 0x9, 0x0, 0x1, 0x5, 0xffffffff, 0x7}, {0x2b, 0x356, 0x24c7, 0x5}, 0x7, 0x6e6bbe, 0x1, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x4d4, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x3502, 0x2, 0x0, 0x3, 0x6, 0x8, 0x7df}}, 0xe8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r9, 0x1}, 0x14}}, 0x0) 04:56:48 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r13, 0x0, r12) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r14 = accept4(r1, 0x0, 0x0, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r14, r15, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r15, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 393.643885][T12459] batman_adv: Cannot find parent device 04:56:48 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) 04:56:48 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) 04:56:48 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:48 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01001000000000290000d3f50000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r9, r8) r10 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x4, 0x80, 0x2, 0x1, 0x0, 0x2b, 0x80100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x585, 0x0, @perf_config_ext={0x9c, 0x1f}, 0x81, 0xfffffffffffffdbc, 0xf07d, 0x5, 0x6, 0xcdf, 0x3800}, 0xffffffffffffffff, 0xb, r10, 0x8) fcntl$getown(r11, 0x9) r12 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) setsockopt$PNPIPE_INITSTATE(r12, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) r13 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x2, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10001}) io_submit(r14, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r13, &(0x7f0000000000), 0x10000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) io_submit(r14, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x4, r11, &(0x7f00000001c0)="1a3c53f91d532694acdba53c240366a8c8c4e0f5995dc2803b466a3ce6efd12d89b46fef77c651b090ee0774f3566b4dbc63426b125fcd7cb0dab6c1892e44ca5f7a26955abe94e2785c12d14f5bab0c459e1745f710211145220f9268705723ddd505e6e5b2b62e8ab680ebad9e200546b72c7e32378cf951", 0x79, 0x8, 0x0, 0x2, r17}]) 04:56:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x285) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x1f4) 04:56:49 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:49 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:49 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r13, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:49 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0), 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r11 = accept4(r1, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007fffeffd) [ 394.553618][ C1] sd 0:0:1:0: [sg0] tag#4442 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 394.564265][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB: Test Unit Ready [ 394.570882][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.581722][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.591555][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.601384][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.611329][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.612764][ C0] sd 0:0:1:0: [sg0] tag#4440 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 394.621129][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.631734][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB: Test Unit Ready [ 394.641454][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.641566][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.648116][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.657788][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.667443][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.677220][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.686916][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.696620][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.706349][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.716066][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.725744][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.735420][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.745160][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.754874][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.764539][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.774250][ C1] sd 0:0:1:0: [sg0] tag#4442 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.784142][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.812110][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.821988][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.831802][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.841656][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.851481][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.861343][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.871160][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.880121][ C0] sd 0:0:1:0: [sg0] tag#4441 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 394.890704][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB: Test Unit Ready [ 394.897424][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.907240][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.917086][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.926910][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.936823][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.946632][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.956464][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.966289][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.976128][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.985927][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 394.995794][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.006115][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.015956][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.025841][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.035820][ C0] sd 0:0:1:0: [sg0] tag#4441 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.044716][ C0] sd 0:0:1:0: [sg0] tag#4443 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 395.055298][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB: Test Unit Ready [ 395.061903][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.071768][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.081565][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.091357][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.101194][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.110989][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.120819][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.130646][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.140439][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.150280][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.160077][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.161054][ C1] sd 0:0:1:0: [sg0] tag#4446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 395.169886][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.180346][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB: Test Unit Ready [ 395.189997][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.196647][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.206309][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.215992][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.226425][ C0] sd 0:0:1:0: [sg0] tag#4443 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.236129][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.244840][ C0] sd 0:0:1:0: [sg0] tag#4444 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 395.254544][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.265027][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB: Test Unit Ready [ 395.274735][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.281201][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.290902][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.300561][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.310264][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.319937][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.329682][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.339405][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.349121][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.358771][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.368469][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.378151][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.387848][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.397529][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.407255][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.416916][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.426755][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.436446][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.446165][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.455867][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.465550][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.475211][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.495227][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.505736][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.515568][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.525362][ C0] sd 0:0:1:0: [sg0] tag#4444 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.534344][ C0] sd 0:0:1:0: [sg0] tag#4445 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 395.544932][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB: Test Unit Ready [ 395.551620][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.561470][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.571332][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.581155][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.591058][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.601089][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.611664][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.621478][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.632033][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.641847][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.651833][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.661651][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.673150][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.683271][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 395.693159][ C0] sd 0:0:1:0: [sg0] tag#4445 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:49 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:49 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x32, &(0x7f0000000080)={&(0x7f0000000240)={0x28, 0x0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x801) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) ioctl$SIOCGSTAMP(r2, 0x8907, &(0x7f0000000040)) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50000200}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='\x00'/11], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xa0823006}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x60, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff07}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000980)={0xb8, r4, 0x200, 0x70bd2c, 0x25dfdbec, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3fff800}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6d8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2f52}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044811}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='io.stat\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x59608221}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x400408a4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r10 = socket$netlink(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x24, r9, 0x8, 0x7d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1f}}, [""]}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="28000000870bce0f3800119f1faa5b1971f6d296213e7393a409a73cfea4c044a2bb4324597a02f7", @ANYRES16=r8, @ANYBLOB="00012bbd7000fddbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4810}, 0x1) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) 04:56:50 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r11 = accept4(r1, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007fffeffd) 04:56:50 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$sock_SIOCGIFBR(r15, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r15, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) fstat(r0, &(0x7f00000009c0)) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r16 = accept4(r2, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r17, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:51 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 396.044811][T12506] device geneve2 entered promiscuous mode [ 396.063185][ C0] sd 0:0:1:0: [sg0] tag#4448 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 396.073806][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB: Test Unit Ready [ 396.080570][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.090372][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.100220][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.110095][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.119946][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.129764][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.139607][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.149392][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.159213][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.169060][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.178851][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.188688][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.198488][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.208323][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.218121][ C0] sd 0:0:1:0: [sg0] tag#4448 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:51 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r10 = accept4(r1, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x1000007fffeffd) [ 396.713681][ C1] sd 0:0:1:0: [sg0] tag#4447 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 396.724316][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB: Test Unit Ready [ 396.730932][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.740811][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.750641][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.760458][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.770295][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.780321][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.790162][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.800018][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.809856][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.819700][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.829523][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.839376][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.849220][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.859038][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.868927][ C1] sd 0:0:1:0: [sg0] tag#4447 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.877994][ C1] sd 0:0:1:0: [sg0] tag#4449 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 396.888704][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB: Test Unit Ready [ 396.895422][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.905364][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.915199][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.925041][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.934871][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.944789][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.954630][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.964457][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.974284][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.984119][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 396.993876][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 397.003704][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 397.013538][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 397.023372][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 397.033199][ C1] sd 0:0:1:0: [sg0] tag#4449 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:52 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:52 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r13, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x64}}, 0x0) 04:56:52 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$sock_SIOCGIFBR(r15, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r15, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) fstat(r0, &(0x7f00000009c0)) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r16 = accept4(r2, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r17, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$snddsp_control(&(0x7f0000bfd000/0x400000)=nil, 0x1000, 0x9, 0x80010, r2, 0x83000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x22a080, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_SREGS(r7, 0x8138ae83, &(0x7f00000003c0)) r8 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14122900", @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) 04:56:52 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r10 = accept4(r1, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x1000007fffeffd) 04:56:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) 04:56:52 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) 04:56:52 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$sock_SIOCGIFBR(r15, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r15, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)) fstat(r0, &(0x7f00000009c0)) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r16 = accept4(r2, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r17, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:52 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r13, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:53 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r10 = accept4(r1, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x1000007fffeffd) 04:56:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev, @in=@remote}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, 0x0) setgid(0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:56:53 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x6c, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0xfffffffffffffcc3}}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000640)={"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"}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r10 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x10003, 0x2, 0x4, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r13, 0xb704, &(0x7f0000000000)) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01000000000084bc4def16266e6bc74cfd0c998cb9994b7caa8687dc526c95e73663c290616bc5419af2cd1c0718d28d0a7b1c2e13082f83e0027e19d63ecf25004bc5022d00b2bad7660ee093fb099bec2cae25974522cac856d6b23300000000000000003f4a674eba350b607cefc009c5a13989be0b3e7b5c88977ad9d83b4fc32aacd8abb5fca1de8540fc4dd2a303be3cb006001b02dd11efb87360416e3970dfc5fe868f123016ac894a47710d53aeb436ea60c6e2bf908bd57e6b1334fe96089e370ba8e3533e1ac497b5b00cfe0b6d3c10b6fdbfcf1e11f61ac3430200ad7f476c90e3607913c53cfce7d6233f3e53833decc6590949a02abcc0f4ca9517f18d01a34009f2786d6fde4fc208a444eac3c62247275a9bd95ec0a954606434449056e21034f0f6e411c2b50daa515dd9163695632445a676a308ec2eabaee9a8e59b66f179708009d5b0ea4e97d575c2846209199320ed9a2498bdde82cf2a69425fd7abcbdb943fec2279d218c440897424ad431c0ae3d4405d961c8167083a42cf148f7526531ed7b0bf187285f514eb84c9f18f02fa06945ace61f7c2136174"], 0x14}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x8300, 0x0) 04:56:53 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:54 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r23 = accept4(r2, 0x0, 0x0, 0x0) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r23, r24, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:54 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r10 = accept4(r1, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x1000007fffeffd) 04:56:54 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r12) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r13 = accept4(r1, 0x0, 0x0, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r13, r14, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r14, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000070000009ac8c159c5508460312a28b8e658dfa37f86454d9b5b7624ab5b06a5fffdda552dba777d7ea936f8100ff0f1e6d9e233b0524f7e1f1593f4d5b57e223a3a16a74c69af27f706aa07143051e6151cfc5f833d324133b70b9aa85e64fd0157013fb2104819e0677103eef62e39ef0195a47bbb07e9c49469ba6a1b800f035325dc9f4b124948ba"], 0x14}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000640)={0x8, {"85020742c069f6149d4107441700adf05a228bbfdb614978bcd4663afe315d4d507cf89b3098fe606931beac8e1d1ad79cf95284bbf46acfb2b7d14a01541da037bc29c5c1a70374283b9de85680f6d2c762fd5c55984f3c1fb666174d2f4ab6ddf568f2dd996684b882d9f42f5ddea0a6f49fb7a840809db67ba1f995a98a06b88e0f73ab0f2694747c6a25f4703d609f7687fc07e5097118d6785ac485e32df6c8f2fe830d95b9f10da0d7f4c0d875e793705b09657c79b85e9cc736e785f9258ebbe626beed2adc08b6396c341cb8dd62fb426102eebca7c5122c458a1213be7040a672be5db2e21cdbef018ae937dfb59698e26c4ba46f656efd19e3eeb7a8d79b2761b857860dc9fafbcf29d8b618f632b3cf35db0d8e6532cd730bbb5f0b94f09de0b79f3af65ea9c824f0994d4be8c728cf71c7164a70189580fce96185480047b87f345720e1aa72943255c72c04523a3ff8c942d42cb3095065522c73f8259c95a2e9f7daf9f15a5084dcb9bda170375616008f19f86efb6e027642dabea81a4095835c71dac492caa1385b4d2b4787ca6e00f9811d92ea5d5f6d0ef3d38c76be07a772f9a5f2a9e4de6a93a3721908f7a1028c8fb376bf562aa4c6161345f46eddf9f61652275d20fc380a5a56b9e39e0d16ccce5c8ffc87088f93dd88bd01e860ffc912d57f8aaac433480ccf7f309759973fe6926e2a6d209f7c2cb56b14ba1da6624bbbcf1e2410ea99bebd07ed0d77d454e691062c3d02e0e451c05497b0d18cdd4c41767ae753732d62f98b1ed6cfb934df7119b0b2e8840207b6034837d2c5edf2e9bb2bdfc8b74b2aa06313aeac1cb7dd6c8e0accf9dbdbca344712a3360d6683db70cb0afe55ad4effb701fdde1ba6cc4133ef8caed22d35b53ca1cf54776ac0d7a4fc1889da133b2d42640eaa6535144225c5e6e742701877f0092ecee229341f05e96b54323471f02fe10e0d44c6285fbc3fd92e9548880b65f7a25e25ba0e68a7a61c34cb4bbab6caee34ee7ab071b84cbc06ab02f09869ca65f2c4a18b483882836cc4692f096485c5e6f1d218a08a30440f8ef22910ffcd033d2c12894d866a63ea4595860f9d10747a37965fc1e8830506aa0a0f2879a32eabfba1b15d9dcb736059bbbe464c03b69a9f8e34a25e6ebb04fa66329da29ffddd33829b51ba601a3b9b2064b79e4ee6b48377345261e7d50ece7f6023c6c7c4cb06332a81d7675e33a4b0f4d1fce717477f439ccbb5a9e4d7c55d60413e9c98b89c191104760a57df25fb1e15fdde0b12976ac1dad96d25f902ea5f5b3c75fae343028517beb5b9f83cae6e746ab23002f810b755e728564ebe80a52c968dc584f8051ebf1ab90cc4b6e852eaf943bc0ea2ed3eb27d6416a89276a50963d00a83b84beb8b364b165e3e07501ce0f095d3f3be23a8db23dfe2d9d25d0295db43cd8e64cbbd923314237a21959c2a07c5a540b9a23cc445c08d8f0cac9a54917e52742dadb1e846a4013eb56466e15d413bc2c7700eec99527cf0ec9847034deb169a69a00922e91880384273021dd337577573682ebfe5ce3bda174c1922b209035be5c3ef22800ce5f8673e1d2ab3d53ca05a1abb8804a460148802b4269498e8d45c90de413090374af3c05acc5d736872d1f8821d27bc40642703d4194615ded7845dab96044dedb04e1500be5024a700fbdff1a5c981b3d41778a3bb7c55660f5e9393c6b33255a36bcfa5e4988ba39f9ed260f30946ba96e31d08269a1310850cae1657797d9f82a5b2d34bc7dfb5e8ee5f2eb1fc31fda0af1fc80cea1f63b61cf242aec58e34140d444e3277ea5111558d2a7ad10c43b8c3a9a00222aa24cbfac80ae46a62f559dac7626443c66dcd259f65fea54d4f042f4dcd31475006dc4d10a8906f0517e51ff5fdccc834dde8b2092a3a67f9a672625372d020116469fec1ee9822d013d16127ea2a972d4099baa7ab722886b7ef088fb8c0595fd0de52b8b787fb64fe1cd3ce4eb8dd2e387608ffef4cfd348a9e7d9063faca3aa6ea0d22b2e338625860c9dfa123fffa98550bd7bf926b131b6d1071dbc8831c2ada2b7cb75904fd2564c8e9758ad3c4d4aaac2a483caa8af8b304ac0e427d5028bdb0a2486b4be96bb6b5f91be632acaa7b47e787837c727f8ae201ef4946ab23b76e051ee36bf46eac0f23897a3dec18736e72da6b05134db5ba3adadbf7fbe2573014a7e48796c22b0aada2e3be304d1109ad456ffa13f56cfee32b336fc67fb8b8b1d5b114048c57554b2ebec71a43c4fff5eccb7052dfea42218bd91096c341b4709b5e4e8a73c707fe7e7a95c5511d0c3b853459b05f207dfb7c7ba9e9a16d466c90f2162ac56c546f7115029421984e61a451d97855eab51ad29ca3f3c8a1171222d8657e6ccd117fad363121af1a533be298b1743c6fade201542c02567e19fbf93f9f510b83ac2e9c8e9dbfbd85f5e704bbfe6512ae667d100922bb98313a8a6c78cde2d5eb735e796cb5e5c3f9b533c06f278b4e93b9891261fc10832fd9f27e8bd06a23ce9fe2bf406dedac1e9760abe7641ec98524b2df06d0a3fb760601388d9e5bb7b884601e72669b9a80299008b02a412da64913d43cf7ceb659bf2004beec99959b1fd22ff21324af6d18e762d2e212a43b761e5818de2ad160b742a4b15aa567ed2e905302c362a718cedeeb6d6b91433771a801a024ba904be5161fef974f093ae8e05fbf4216b6c70dac6a353f662ef5ba21a1b86609716ea9f6f21357f15d74e0b2e69bd180dc7baa424c8ad10cf0cf21834fce47958baedb42d40568c5459e97970d99816c9c1126c56e22c65641141364eff6ee6e9d103dad6e0020fc81e57cb435ed375a32a03029d76aad5880537cd65844a65bd0d01c6817f9d180ec17725bac115c95668f079885e99eecd8343f7aab425d98c8d79b4ebaafe58a83916f9a3db3cba54ea7a14f3ee318970ebc6593a29cc38e584b2372fb539a96f7e29f64fa06e9a14afd4146a381316b24789c0e1b759e36dc1d7336cacdc751beb45f00989504f69e3fd291aeaac5a75a2127086c4bfda5b9d72d75c372032dbd4de5148cbfd171cb9af82a861a028dbb081e1314ce86c1ce6f78e35d7f3acbbd8441e8e068d3a9cd716495c2636636dba0966b8cf73194c291eb46a09a1445d4f8cd9ffde59398b297ea60772eb6c8e6c39a1313b68223dae27db6b7854c8bc39584847af28a0f07eb71e2fe487875e736ff4f51d9e000fb4ab353013de81a2692d2290d8a655676240cff00c86d0eef99fa73afd914b214808b01d8253baa708462dc0949021a1ebdbe9f0ab814f738e90f7fa35f6e63d688320ec80bc5ee83821adfff578286880d7ee3e123dfe829b16bb1c6f6176dd123f0bfd274eb5439c35b5c4f88634a54737e1e1e2fec90d7e3663e066939006da5410b1f4c057c60de82467bd2e69826e3683526eeb330d40761b950838d87cb8bbbfde972b49828dadb4d0627f3352fe656dab54091de0634a29901be92a50a84b309461d08cd230931ea6d4f59d8ac906fd6b30b2c577d45a0cf40229f24e498ae0a500e7dbf02cea3fad356cc39ebe78fe8ecf6ec7a807db7253de0fbfc7eb1e264f55539d6eac7e9e6ea225abd7ba68cffddd349d9e9471621f8541ff1055166e104688eb2ad8731070c3145b0c43a45f9239e7b7cbf83e952d2f7b89f2b5c6a2ca02ab596ddb59e446cdbbaa10407b2097976644641ff597323a5b35257a57596ddb3a3cb009b0c18c3228c7efcd8bb75a97161c388793d069fac212b21f0c238ce03ba6f22467da3f1d10e87a80ef47fef37e41338c57224e23f613ee44a556489c184ab13736b5bc03925d7840cd25f7e1aded811c5e9f6c3a45dcf53a21d21a87c91509265343b2f06b430e5dc1662b30bc462ef4b129d356bf513b0d9063349b739eaa562592d8e12936bbfdcc33424539c39c821e1b7c859179ba963cbed6726c1aaffc166988d118ac86de346a5c75c8b1476813275dd1bb61c4e67ec2c9af2181dd1b7e714078becd289f0b2dd0fba317475479a45bd8f55209342f0fc7f6f2a3e12430863445d07bf8b9d3e697419a09ccddd04ef1e4ddbb6ebb75ab44662908ad9132966fd89fc297763a4755e4ac29365fa0fbcf1d8d5a0fe88d9939be41cd147eb56474fa1c73fe9e090ccf1e3fbf35931c621036035e410da1dbd8bb526679553a5717b64c5e94c632e378769aaae5d7e253252d8a6f7fb74cca4d36a6f179b6c21397f26efb243d1c03b51940c6833f9a43ba4690621d626e835aeb888254171928e701c041bf6180f2d21fce80df1061caab01c995ef67adaaca6d9ecc514a36ee7dfbc8f4781003e802df805c8dea25b67561fb6944d21ed8dc2d029af1ea76b9fc537f463adbe3ea038c74a956372862836a6b0d06b37fa03ec8d7a344219416d9b89c94007222adcf36be9aabcca6846443f5986706e0133beaeef8b63b7c3ef12780b575c78b738878f3b7ad1f03521ba1d7b027bdd45a8deedfd6f1a97011cee378899da4382fc321661db55303d293e0741f29b540c30f7a679d8a8f77633fcbe0239ecc2e39633effb6767eec6c8172eb71d8fc2f90bea2b35aa496997e854de56a3cfb6ea7516352df791d973c1e5a05211a3050a8f3f0b042eafb09d960db3f1ae30cba5d76d92ccc1ebb39574cdd15be8664c7c99eea5a8fb805d62dde4d6f41e6bc9d959c784b1fd8afe9a318c3d8be2e99f21e6fcbf48982d13dd8b6d0b509b716383a099873318fb3045a10bba4aa43db3f2875771b1f0f8bd9f143aca1170ad2e6c1f5788c7435524d10ac6b32572a4d20f9202b516e96c2262f657ce08c76ab713c98f4ac2660c952da10bc9945abe49a4512a9fad0d31b9043cada7f004f22eba5563106272b6b5dcbfac44571cdccb40016c5c55741f5d94818646c7cd8fd9bd814a984247b6ade79480d874eef146762af9c47ad57b9154c45214582e8133375855acbf9aa4592689c12a7e542ba94a855a320775e2e820c262acdf3bf133d2fb723bfe5d6075d2a0f6429702894e88318c93fa6114902510d993bba74b948304029853057aa58fb4b58bcdef93376dadc3369c4d6aac3719577bf0cfb4aada737b09277c91d14e82f5732d27c25a98325921ac758a8dbfb5bd0fd641bd4ce11384407ea2f715685031d32908ea88da13f8434ddbe6c30cb0c655faa672e2533d8a087df48bc889b9150e6355e85744d599b9f9e10e7835f2d9ff2c4118fce9dc1975351180b8e13be35e775b3cec32a7e2de44a58cf722784975855f3e06a7336d5607123e88a3d8c0e0cc383b900d7c2f3a23a6fe7a9df90c8c2fd166a87ffeba343e4bc5b1b20fe2cd16d30cc6dc1645521bda32a67615c049c35898ada67d9cbc0e5ca620115fcaa49f7b90fe64caa1eb14a755d6a8ce5ef97c83c56ce5bc2088fb6150db593c3f91b04a69459f6e3037429d6f128ee4920b2f9ca67dad84e2f02d2e27dd6d1dbaa98c93d4be391a7e7f38d72d2f675c35e7225ef2673206c425e3972820028c8718f73c8d39e6cfb92c3cffff59f24c2625f294d1c4e1a198aa41d8d980f598ed5238e44594c850fcd3a0aa086954f7c466aad5b96bf7de5dccd2f512531a41ad23a46af50a83414eca652ecf20cd1b05f5ce258aa80c892faa2199c95d01e92b6ee829324e98aae8833f7434a17efba7c9a737ef4e5a9dc6f2a0303c2b1ba8c3a0e6ed1a0bfaa99e68427005caed60b6d2d10802c61b4027a7c5d28f0f6523", 0x1000}}, 0x1006) 04:56:54 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev, @in=@remote}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, 0x0) setgid(0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:56:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01000000498b4cb7000007000000"], 0x14}}, 0x0) 04:56:54 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:55 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r8 = accept4(r1, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007fffeffd) 04:56:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0400acfaf6abafb62c64e14cd48af90000", @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) [ 400.049691][ C0] scsi_io_completion_action: 9 callbacks suppressed [ 400.049821][ C0] sd 0:0:1:0: [sg0] tag#4418 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 400.067278][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB: Test Unit Ready [ 400.073908][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.083850][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.093806][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.103635][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.113430][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.124207][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.134034][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.143800][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.153616][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.163429][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.173332][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.183268][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:55 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r23 = accept4(r2, 0x0, 0x0, 0x0) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r23, r24, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:55 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r12) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r13 = accept4(r1, 0x0, 0x0, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r13, r14, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r14, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 400.193159][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.202976][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.212897][ C0] sd 0:0:1:0: [sg0] tag#4418 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.480476][ C1] sd 0:0:1:0: [sg0] tag#4420 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 400.491142][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB: Test Unit Ready [ 400.498863][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.508764][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.518675][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.528712][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.538720][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.548673][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.558610][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.568439][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.578709][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.588782][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.598682][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.608607][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.618512][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') getsockname$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14a89933", @ANYRES16=r4, @ANYBLOB="010000f100"/14], 0x14}}, 0x0) 04:56:55 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 400.628350][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.638332][ C1] sd 0:0:1:0: [sg0] tag#4420 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.684858][ C0] sd 0:0:1:0: [sg0] tag#4419 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 400.695688][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB: Test Unit Ready [ 400.702373][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.713342][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.723226][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.733112][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.742992][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.752963][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.762834][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.772703][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.782578][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.792468][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.802337][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.812227][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.822124][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.832111][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.842114][ C0] sd 0:0:1:0: [sg0] tag#4419 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:56 executing program 5: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0xdea2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) 04:56:56 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r23 = accept4(r2, 0x0, 0x0, 0x0) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r23, r24, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:56 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r8 = accept4(r1, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007fffeffd) 04:56:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0x5, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:56:56 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 401.323466][ C0] sd 0:0:1:0: [sg0] tag#4421 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 401.334255][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB: Test Unit Ready [ 401.340949][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.350890][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.360797][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.370680][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.380716][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.390613][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.400683][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.405826][ C1] sd 0:0:1:0: [sg0] tag#4422 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 401.410574][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.420966][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB: Test Unit Ready [ 401.430718][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.437286][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.446970][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.456680][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.466500][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.476198][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.485931][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.495633][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.505373][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:56 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r13, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 401.515084][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.524824][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.534519][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.544248][ C0] sd 0:0:1:0: [sg0] tag#4421 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.553879][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.572274][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.582191][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.592032][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.601917][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.611965][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.622099][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.632027][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.641915][ C1] sd 0:0:1:0: [sg0] tag#4422 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:56 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x2000)=nil) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 04:56:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000000c0)=0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:56:57 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 04:56:57 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r8 = accept4(r1, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007fffeffd) 04:56:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x8480, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:56:57 executing program 4: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r11, @ANYRES32=r12], 0x14}, 0x0) r13 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r15, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r16) r17 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = fcntl$dupfd(r18, 0x0, r17) ioctl$sock_SIOCGIFBR(r19, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r19, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r2}, {0x2, 0x9}, {0x2, 0x0, r3}, {0x2, 0x3, r5}, {0x2, 0x2, r6}, {0x2, 0x2, r8}, {0x2, 0x2, r9}, {0x2, 0x1, r12}, {0x2, 0x0, r13}], {0x4, 0x2}, [{0x8, 0x7, r14}, {0x8, 0x3, r15}, {0x8, 0x2, r16}, {0x8, 0x0, r20}, {0x8, 0x1, 0xee01}, {0x8, 0x2}, {}, {0x8, 0x3, r21}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r22 = accept4(r1, 0x0, 0x0, 0x0) r23 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r22, r23, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r23, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:57 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 402.379645][ C0] sd 0:0:1:0: [sg0] tag#4424 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 402.390499][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB: Test Unit Ready [ 402.397333][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.407165][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.418695][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.428574][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.438430][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.448885][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.458736][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.468618][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.478435][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.488315][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.498131][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.508001][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.517813][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.527654][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.537514][ C0] sd 0:0:1:0: [sg0] tag#4424 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:57 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 04:56:57 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r13, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 402.881301][ C1] sd 0:0:1:0: [sg0] tag#4423 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 402.891983][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB: Test Unit Ready [ 402.898743][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.908615][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.918582][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.928536][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.938390][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.948314][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.958257][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.968111][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.977958][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.987852][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.997687][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.007618][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.017452][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.027282][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.037115][ C1] sd 0:0:1:0: [sg0] tag#4423 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.046037][ C1] sd 0:0:1:0: [sg0] tag#4425 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 403.056668][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB: Test Unit Ready [ 403.063295][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.073149][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.083146][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.092981][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.102820][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.112676][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.122536][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.132392][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.142237][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.152111][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.161972][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.171909][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:58 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007fffeffd) [ 403.181770][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.191604][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.201446][ C1] sd 0:0:1:0: [sg0] tag#4425 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.332381][ C0] sd 0:0:1:0: [sg0] tag#4426 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 403.343178][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB: Test Unit Ready [ 403.349949][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.359802][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.369858][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.379755][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.389638][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.399584][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.409461][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.419400][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.429280][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.439207][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.449082][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.459004][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.468859][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:56:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=0x0, @ANYRESOCT], 0x3}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$can_raw(r4, &(0x7f0000001880)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000240)=""/66, 0x42}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/41, 0x29}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/141, 0x8d}, {&(0x7f00000005c0)=""/48, 0x30}], 0xa, &(0x7f00000017c0)=""/139, 0x8b}, 0x8061) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000000c0)={{0x0, 0x5}, 'port0\x00', 0x8, 0x80020, 0x9, 0xf71, 0x200, 0x1, 0x0, 0x0, 0x5, 0x3f}) [ 403.478669][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.480627][ C1] sd 0:0:1:0: [sg0] tag#4427 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 403.488534][ C0] sd 0:0:1:0: [sg0] tag#4426 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.499175][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB: Test Unit Ready [ 403.514414][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.525017][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.534952][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.544783][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.554623][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.564563][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.574402][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.584356][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.594204][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.604154][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.613893][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.623844][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.633805][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.643669][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.653634][ C1] sd 0:0:1:0: [sg0] tag#4427 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:56:58 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 04:56:59 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007fffeffd) 04:56:59 executing program 5: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_targets\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006f, 0x6c00000000000000) 04:56:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x50}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$tipc(r4, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = dup2(r5, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r8, 0x1}, 0x14}}, 0x0) 04:56:59 executing program 4: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r11, @ANYRES32=r12], 0x14}, 0x0) r13 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r15, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r16) r17 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = fcntl$dupfd(r18, 0x0, r17) ioctl$sock_SIOCGIFBR(r19, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r19, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r2}, {0x2, 0x9}, {0x2, 0x0, r3}, {0x2, 0x3, r5}, {0x2, 0x2, r6}, {0x2, 0x2, r8}, {0x2, 0x2, r9}, {0x2, 0x1, r12}, {0x2, 0x0, r13}], {0x4, 0x2}, [{0x8, 0x7, r14}, {0x8, 0x3, r15}, {0x8, 0x2, r16}, {0x8, 0x0, r20}, {0x8, 0x1, 0xee01}, {0x8, 0x2}, {}, {0x8, 0x3, r21}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r22 = accept4(r1, 0x0, 0x0, 0x0) r23 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r22, r23, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r23, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:59 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r13, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:56:59 executing program 1: ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) [ 404.155002][T12720] batman_adv: Cannot find parent device 04:56:59 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000ac0)=""/189, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000140)=""/207, 0xcf) 04:56:59 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x0, 0xfc}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 04:56:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a964010e6f0e206095da5ad15d26a4218d1fcfa5d54a9f82af5737d00a1490b398f475d9922da581266bfa4bf4e71d5a9b8bb59774827117c3131494f0f4775c", @ANYRES16=r5, @ANYBLOB="01000000000000000000070800003a1120b3beecb8690028dd15d79315432786ecd7653c1c0c653923aaee149a09f3de63ec86c661bec4f0dceca792e3328825a41812246ca2e76ebd2ec5420e2245c60c805b79d173eb643aa7bc2100954304d4b5191ba2f341289f5e480aed9207f8f6e5fa36956f72c34c52df1a766e72f2bed05b4afc4029d023e867427865044847e496a51a0c33d11f9add65676b7298273b85648c8aab6a57f0060b058f68c289ec6744433f20851539947cb5e950239854bb1d3afec582c581fbe39122a7867667f1dd29a0ffc91d21e7cc6cd2115b6ef5b4fa51894c9e80f7a0a009f9040fc65d8013dc132fe784db56fed7d27bbfc5c93d00397eded3f91e3b609efe31a3543486bb11a8e8be223364dad34830272df325c3bb2ebca01639bdc1ea9edfd9dcb808c716d5ab5a9f945627aa83fea3e901eee94eef0f8d4797d2963e0a052620498fa557cc0086e5f679824150c8a558b5d8350b1388453367105b28d6cbee0a32d030f89e7b4b4e9aab8ca0"], 0x14}}, 0x0) 04:56:59 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0), 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r11) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r13, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:57:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r5}, 0x3c) 04:57:00 executing program 4: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r11, @ANYRES32=r12], 0x14}, 0x0) r13 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r15, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r16) r17 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = fcntl$dupfd(r18, 0x0, r17) ioctl$sock_SIOCGIFBR(r19, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(r19, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r2}, {0x2, 0x9}, {0x2, 0x0, r3}, {0x2, 0x3, r5}, {0x2, 0x2, r6}, {0x2, 0x2, r8}, {0x2, 0x2, r9}, {0x2, 0x1, r12}, {0x2, 0x0, r13}], {0x4, 0x2}, [{0x8, 0x7, r14}, {0x8, 0x3, r15}, {0x8, 0x2, r16}, {0x8, 0x0, r20}, {0x8, 0x1, 0xee01}, {0x8, 0x2}, {}, {0x8, 0x3, r21}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r22 = accept4(r1, 0x0, 0x0, 0x0) r23 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r22, r23, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r23, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 405.087881][ C0] scsi_io_completion_action: 3 callbacks suppressed [ 405.088014][ C0] sd 0:0:1:0: [sg0] tag#4431 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 405.105397][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB: Test Unit Ready [ 405.112073][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.122007][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.131917][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.141817][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.151661][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.161543][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.171361][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.181248][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.191327][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.201194][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.211124][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.220995][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.230853][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.240672][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.250529][ C0] sd 0:0:1:0: [sg0] tag#4431 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.351943][ C1] sd 0:0:1:0: [sg0] tag#4432 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 405.362610][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB: Test Unit Ready [ 405.369350][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.379246][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.389242][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.399179][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.409063][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.419800][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.429746][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.439747][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.449593][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.459504][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.469443][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.479284][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.489295][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.499150][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.509141][ C1] sd 0:0:1:0: [sg0] tag#4432 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e22, @rand_addr=0x100}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:57:00 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007fffeffd) [ 405.762793][ C0] sd 0:0:1:0: [sg0] tag#4433 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 405.773520][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB: Test Unit Ready [ 405.780438][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.790346][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.800242][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.810129][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.820037][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.829942][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.839843][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.849821][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.859727][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.869611][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.879674][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.889720][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.899612][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:57:00 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r11) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r12 = accept4(r1, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r13, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:57:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008042}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64=r7, @ANYRESHEX], @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 405.909608][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.919832][ C0] sd 0:0:1:0: [sg0] tag#4433 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:01 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r21}, {}, {0x8, 0x3, r22}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r23 = accept4(r2, 0x0, 0x0, 0x0) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r23, r24, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:57:01 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007fffeffd) [ 406.212611][ C0] sd 0:0:1:0: [sg0] tag#4434 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 406.223246][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB: Test Unit Ready [ 406.230101][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.239929][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.246448][ C1] sd 0:0:1:0: [sg0] tag#4435 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 406.249742][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.260169][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB: Test Unit Ready [ 406.269911][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.276477][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.286125][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.295855][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.305546][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.315247][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.324922][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.334771][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.344425][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.354261][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.363876][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.373579][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.383286][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.392988][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.402689][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.412475][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.422266][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.431999][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.441692][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.452438][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.462641][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.472367][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.482067][ C0] sd 0:0:1:0: [sg0] tag#4434 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.491764][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.510127][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.520074][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 406.529910][ C1] sd 0:0:1:0: [sg0] tag#4435 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[0x48]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:57:01 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 04:57:01 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r10) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r11 = accept4(r1, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r12, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:57:02 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007fffeffd) [ 407.110783][ C0] sd 0:0:1:0: [sg0] tag#4438 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.121399][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB: Test Unit Ready [ 407.128148][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.137958][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.148195][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.158071][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.167893][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.177711][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.187518][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.197426][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.207241][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.217072][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.226879][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.236717][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.246562][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.256528][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.266338][ C0] sd 0:0:1:0: [sg0] tag#4438 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.539501][ C1] sd 0:0:1:0: [sg0] tag#4436 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.550202][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB: Test Unit Ready [ 407.556951][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.566820][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.576652][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.586685][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.597035][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.606865][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.616729][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.626684][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.636516][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.646355][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.656687][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.666648][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.676617][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.686468][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.696476][ C1] sd 0:0:1:0: [sg0] tag#4436 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.705441][ C1] sd 0:0:1:0: [sg0] tag#4437 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 407.716059][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB: Test Unit Ready [ 407.722674][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.734112][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.743844][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.753839][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.763683][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.773526][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.783671][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.793531][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.803379][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.813485][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.823414][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.833282][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.843111][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.853032][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.862988][ C1] sd 0:0:1:0: [sg0] tag#4437 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x1, 0x83, 0x80, 0xf, 0x4}, 0x3c) 04:57:03 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r2, 0x1}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000012800e0001ecd85a16fa97024e0bb862d16970366772657461700000001c00028008000100", @ANYRES32=r4, @ANYBLOB="060011000000000005000b0000000000"], 0x5}}, 0x44050) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000000)={@rand_addr=0x1, @loopback, r4}, 0xc) 04:57:03 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r21}, {}, {0x8, 0x3, r22}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r23 = accept4(r2, 0x0, 0x0, 0x0) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r23, r24, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:57:03 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c00020005000100000000001400010008000100000000000800020000000000080007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 408.075891][ T0] NOHZ: local_softirq_pending 08 04:57:03 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007fffeffd) 04:57:03 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r10) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r11 = accept4(r1, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r12, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 408.176334][ C1] sd 0:0:1:0: [sg0] tag#4439 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 408.186973][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB: Test Unit Ready [ 408.193655][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.203532][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.213363][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.223245][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.233140][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.242963][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.252874][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.258993][ C0] sd 0:0:1:0: [sg0] tag#4440 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 408.262884][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.273310][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB: Test Unit Ready [ 408.283163][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.289754][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.299397][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.299535][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.309439][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.319133][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.328829][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.338510][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.348239][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.357981][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.367787][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.377688][ C1] sd 0:0:1:0: [sg0] tag#4439 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.387415][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.415903][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.425985][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.435997][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.445906][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.455854][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.465868][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.475822][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.485675][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.495703][ C0] sd 0:0:1:0: [sg0] tag#4440 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:03 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="00000000000262"], 0x15) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 408.540029][T12808] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 04:57:03 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000ac0)=""/189, 0xbd) [ 408.752821][T12818] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 04:57:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) 04:57:03 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) stat(0x0, &(0x7f0000000040)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r10) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r11 = accept4(r1, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r12, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:57:04 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c00020005000100000000001400010008000100000000000800020000000000080007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 04:57:04 executing program 5: 04:57:04 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007fffeffd) 04:57:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x180) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x2, 0x8, 0x102, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r5, 0x1}, 0x14}}, 0x0) 04:57:04 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$sock_SIOCGIFBR(r20, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r21}, {}, {0x8, 0x3, r22}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r23 = accept4(r2, 0x0, 0x0, 0x0) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r23, r24, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r24, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 409.449646][T12841] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 04:57:04 executing program 5: ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) 04:57:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, [], 0xa}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x90}]}, 0x40}, 0x1, 0x0, 0x0, 0x44001}, 0x7) r3 = syz_open_dev$rtc(&(0x7f00000005c0)='/dev/rtc#\x00', 0x2, 0x8100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r12, r11) r13 = inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r15, r14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r17, r16) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = getpid() sched_setscheduler(r24, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r27, 0xb704, &(0x7f0000001ec0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r31, r30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r34 = dup2(r33, r32) ioctl$PERF_EVENT_IOC_ENABLE(r34, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r36, r35) r37 = socket$nl_route(0x10, 0x3, 0x0) r38 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r38, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r38, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r37, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r39}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5}]}}}]}, 0x50}}, 0x0) r40 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r40, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r40, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r42, r41) r43 = getpid() sched_setscheduler(r43, 0x5, &(0x7f0000000380)) lstat(&(0x7f0000004140)='./file0\x00', &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r45, 0x0) sendmmsg$unix(r0, &(0x7f0000004240)=[{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000140)="0739a17092125795bd8d25b610c1f04f1b7452906864e48a18280704caddddfc", 0x20}, {&(0x7f0000000240)="d0c5da95cd09a15d5ca9f97a64a261eca21d691ba7959f4c70a11629bb53648a91c3c505e4f41b5bd18d36ab36727f877be9e97f023f5a9e1bc090dcc886d8d8bf59795e8d61187be3a0d522a4f2e96a562e8e46c0e8ff1fbfa260d105a42466fa55a043a1e78ba3742f12337c9144339a050129", 0x74}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f00000003c0)="2b3414ac5a021fa0355dcbf4bb5793491abf1d0527dad090a704c7188176161c51ff44ec0c025cad84abd8d8155e9a4c202f14a6fb037eb0aa4d2ca1e4b2b6107c9e0c9bfc60b39e98814e39ecfa11697c52ac0ff3e5b0565db6b2284821e92e9d48e23acd47342401ce2517d9dad8e6f3d9f9a73d23316c54fef92a38ddc9a7f0b8e2705eaa5eddafb4c2fb3bc66a42511d5e7a3798625b49a9c69c5da7651682b1c88c7673b08d75513f0d5bf37bdc8dc559d1ee22d904a7d7ea1fd73c4ecbc367cb12dd50bfdbf2b47cdfca90c8fbfd902bb9046ec38e38ecd9579907d98ab1db9f6f2d604f946ae79f31aac72a8604daed14", 0xf4}, {&(0x7f00000002c0)="d109137a2c80f2c233c997287aad2c1a17106a14ce18558e81b3c236d63f390aca3dec09f759f07ac159e38cb4db392f623314e229159a8a76e170664c4ad297df376cf347030f1c470df06d956d3af556419cd6d1604c365ae64a9945c4e00aa3c3687c56472c8411be8c0280b753ad5480d79ac2234f3b1a6c652b93526bb304d0f2cc20026e943ae4", 0x8a}, {&(0x7f00000004c0)="2180ea4080e80dbc88727cad8128b6fc7ea22457fd1e3e307be59c130e599cac5033c478196f9dfdbc9390f1cbb3b9c11dbc34d246e0a2cb5150ec307c364490b2cfd7fd7165723af40c8a36c5f9d679dc27474bd876dcc1f256d9f5e31bf2a2ec5badff292559b642bcfd2f761c62aaf4172d8428cc8a48e6c9a0221b96a160815116bff99ad03dbc505bdc6fab0db6d56045dbb96a4060995ca9c771d7c4789ba3c48929672bb51a639e999048ddd8f683f5b29ff6fad900e61a", 0xbb}, {&(0x7f0000001640)="669d39c1e033a2f29a9ebc7f5558dba922fc3cbfaafd7f6aeca04ea640618ffbf6f447e3813f018f5c37adda769ed1dc912a5b88e3555948f01b383a6c8c19b0513796ae1937afa8cae27e9cbab569f97b7cbf9f30948dac8af26f3f82f84c8dc4b35d3141bdd84b582a2a8d4f1865ba689092008a222ecc98e51fa5c22d3aadee860951e136a16cf77b", 0x8a}], 0x7, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [r3, r4, r1, r7]}}, @rights={{0x20, 0x1, 0x1, [r1, r10, r11, r13]}}, @rights={{0x20, 0x1, 0x1, [r14, 0xffffffffffffffff, r17, r20]}}], 0x60, 0x4008001}, {&(0x7f0000001800)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001880)="7d42bcd6bfa0d96ce35a4a6636e144017e25a0d2a576628620be41c0c517022d7e05d75dfe866dbaa507049cb0d0983f802ed2d0d6194d16c268e2ca8c17ff42ed79f60e87ea3ca454f6e5007b9194f717042c2665ce848e2290fbb04ac0d223336ee31899307dd24ea4e4d46e17e13157380410fac16cff6e2fab5c8053b51dc1ded9136b9b6e98916876e332de426c97cbdbcc17f667299a8249de55eeebaaa5b555efd77786b28a7cffd3834c5bf1b44f9c63f003294a5b4077318aa153c9639144bfbbb4737ca4f8de4379e1c2df23cdfc283531955e9a66d7181e", 0xdd}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="e889bf207edd8e176e518ddf2e0e0f8e3218ad44bddaa5706c9417972ed564b502a946eb79951434c8ef1fa0f995409f8e3ba95f3f673fc750fe79bfadf7b6868a1cf74571bf24dd0ea0601af4d40157e335181f021610db9832864646c5ffe5e58313dd926bd18cef1d79fc69b6c4158b3ad3c8523565edfe", 0x79}, {&(0x7f0000001a40)="5273fc08e0da4f7d66060b44ded940025cfa5975966b30576f2ef83c3ab6cea34a1d4c8e278eede98e31767ccfd002c2cac209b931ffb9dfbf8539c19337f6f9b5adecdf734dac4f71681fae9a653fa3fab1d4a5683fbb169ede4a3965049b689c1b5629c4b9f6b975048c174278c7b19d4fad66548f2d07c30b1843cf72c193004513b95348f6323b0bac00041a5e12b62388f0a74b7395abf2a455ab4ed19446096ea06940bbe353b7ef133572", 0xae}], 0x4, &(0x7f0000001b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r23]}}], 0x18, 0x20000000}, {&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001c00)="0244f79d731361ecee5355128ec50d9a0af007da20ef39eff222ee2f670379badb4a565230c3c357dbd5a8497d55e6a39221de87203ab4d0a413e03b8a684b9166d8e6b3ceab70ff9a6b3c1f0d0c1aececf2700bbfd4a44ab290f6d62c9e2ea71730653fdbd8b2a7d3919de64ecf4f13171c06a310c56e9f70849104edd3ab69a76a13ec", 0x84}, {&(0x7f0000001cc0)="24108c2e6918eb5986f88948eaa052ba3f63c56b82a58e2038373e907a46e39d319d85d8b833cc7614004a559e3029a8b327105b4a47d9f67d4bd7a36c8f6fe94795d0ae94e9c9c0aed3fe4a1168f2c27b66f7cfb872f57ac84afd1df2751d1772ea50a84e17f069fce24dbeb043a3d17d2967cba14b9aeaeed4e2e6d71e1090741e7dae51c2ef59b8ba9e7d173b7b8efc1d7a91c75c76b6200800a7cbbbf9a326bae5e43a174f0fc041252b03012503", 0xb0}, {&(0x7f0000001d80)="d654f01cea6ac6fb91abbc538ca7a579890e4833d6e924f3ff16dfe20ef22250675ea33d62b35d903e01cdadd0f3704786776a5417ccaaa9cfdcfcafbfd47c2ea90c6261256c9982d2c3d85cc414f17f5258eff55de73e1043dc73d98c136e5c734a1551796eb27670fa4fbca64e284f8c9be56573188e8735a42649a7287d529966669107652bc68822a8d04244611d70e16646d2d2e658e2cb1d01f71cc81fce0726baaa", 0xa5}, {&(0x7f0000001e40)}], 0x4, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r24, r28, r29}}}, @rights={{0x18, 0x1, 0x1, [r30, 0xffffffffffffffff]}}], 0x38, 0x40000}, {&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000002080)="fad17a8539fed35680690c6c11e0a5757ba082f6744ab4d5cd4b5dff95181fc9c292749abd4f4676a97e8263a5d6be08fa618acd46bc4f0c72408ef1bbd7846b6d428bad02fa8109ea87557a69d62f2b02d4e0f6f3979a0e901b830ecd72a6b96a7c49d1d746d843bb431aef205762588baf434ada7d5d3df21e0cc492bcf8c46c1f58f282224d589e06abfdc893f20881902a320730f14cbd48f214625553e2de1466344a96f7550785c08375ed54b992710d06e7f398497df2", 0xba}], 0x1, 0x0, 0x0, 0x6}, {&(0x7f0000002180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002200)="bfbae4b37669a93e6effb3cf9cf9f8608f0d276dcddb9f263b4e0c3c26928982105f4ccb4a2caa19356ae516b08a9205e4d3b1cc47eb9813a785c35bbf5febb2d64bb1f904db95c5dab0c7118d91441aff7a3e51c46c13cbcfc7b6b9227b6666174df344808093552c820304905225b137c83460c55df11c84366e2320f177d16f245a0009d42b820f91379aed438d82545b6feaa725acbe968d7d6381d76e75ee05f0c967575333f3bf1fb5b913c06aff72d6768e6e5dfa53df0555f7ed07efad9d8293550a3a2a605f8ff3ab3ce8ad8009c9ae9fc886c53f775836b5201094142ecc60eb0c", 0xe6}, {&(0x7f0000002300)="fd363a2fcd29e14dd93cd2547fa191ebccb83eac7f54f581b8f3dbe0da89eb4f64136f03ffc5e732066a110b9663b121a06804b3300e00fa45ed057e289435f63d37d290a7d6a537dc72183196c4b13dbc36c745f21fd3fad25048e3d71c4ed519e6df226f4928ff9a1ea21390d4c112ede212397bfd01f6ea69554049f81519df2e931c0535857722e26ca9b5", 0x8d}, {&(0x7f00000023c0)="2fcfb465dd0c1f83b14d6e5f98b3728691a27f03", 0x14}, {&(0x7f0000002400)="71f11bcf4bbeaaf8cd6d90cdb30c0d5014c9f62d39ee9b563c19f123393fdf69d778d33685b663c57382b1db8d3d7e2eac8a1fd8700f774881a8596e2b261809c38d94752bef18ca46e36e5d6551f5532ac9daa0f5770b42095967798e17789b445878a7dd494a4d3c9ac1c9f727919601a6cbbff5a2d8409796c980d29e88d585aceafa0bd1264633427975c556e1a4fb983ab5a703eb6a36e223ddf108e9a072084bd4f816721228de5894f44b6587d97bc62d2f91da48aced12ae86577c7a5fd8dd817ee579143fa0c593f7c15608e2e44d940bbdce43c0c6bd7e0b32db8d0e1e583630df6f3364261b5425a58746e5c4ed", 0xf3}, {&(0x7f0000002500)="cf695ffa45803ef8e3f1f3347d945af8ac5bf84aed62deef783d3f23eb20abe18485a8957e1e5ef7260cca531aba994cb96b1ef2d3149fa0a5f6b7cbbd53b6190c8f487786412eb3efb6f6e1ebe436622bfc7e", 0x53}, {&(0x7f0000002580)="5fa3f8882e1e8d9e495672285b7e7e5ca0f3d449ae99b482c5a236a2d086bce850fd8d66a03422e0fe317c3e0d5c507adcb8929008d71c5a2d539c2b1f9cebc06dda8d3573083f400445fc87a6c33524b1ae0462adc447d97d2ec82ae28f18d9fd019dfece3e6837e05334ff0f5f1987621e2db361164e1bacd0", 0x7a}, {&(0x7f0000002600)="642bbe2edb4dfe3253b3be5b08d1c979520fc992", 0x14}, {&(0x7f0000002640)="0e4df5592a6f6ef0e328ca70ae1933d6d3fc23d65fc51565719bf8abfbfc4abe2258dd1ec25c050d2596c28b735ecbdec4447d616c76468274de2910d1271777d85dc5ffb07fa296728ba7b8995cf91df734a85a039262d34a4c86ef19d4261d1899376709ea0e21be182cec1f3bd37267434f4b7de9d4b28e216fcf40c7966a794aeed85cf44f40", 0x88}, {&(0x7f0000002700)="3169ad44e812a4c6ee7061f872bcc1a9f6282f6665df746aa89762f7f0c0be38deb85be63e1b27b08d69a59b1ed3790b17e786e451c2087d6b301d10436a15209b76a6012f2c88643d518970", 0x4c}], 0x9, &(0x7f0000002840)=[@rights={{0x28, 0x1, 0x1, [r34, r35, r37, r40, r0, r41]}}], 0x28, 0x20000004}, {&(0x7f0000002880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000002900)="8b9a0d52faa898d0244e3f3c531d523d7dda6144c29021337453d840a37d3a1cb39baf5ae74b21830170fd775c71381a19ec7fcafbd0e9e0b581ada1b2bb108e542a0a38e5dd0a31dbb4b7493bcb88c4e1b509c6a838dc9a15cef5251d3c634b03a6913c81ad00ca1994acf95ce684d9eaa282964ed2e53230fa23901f0c1278765e01cf025e1680e5e01917aac9642417487b15ac2e72913394f54ca8a530403661af72dfa675ac797b", 0xaa}, {&(0x7f00000029c0)="082e79e432e73ec54a8cf9c38509d0b8c9f06bfd7d014cadb4794e2c835fd6fa98a979daced3d155ee70de3883bb128c55fad5e350191587f5f5b864a9873201b0f646ae5010316c56d490b90b9799d7c15b77fe840fa2dba2ed07d2086573f9df5648b642bd0f14f7ec4c7d4550f026f9ee3ea96a79de10ed491f8828c8eb6744a99dcaf1dbc53fac28f1aac20c548f9ad96844b6d8cb783310e04b73c278d7bb1a1a7cd4", 0xa5}, {&(0x7f0000002a80)="fdc5a8f494ae599de396cad4bd48f9301285405ceb177c4e024c48cc18890a2b94bbe45a3fce1195c7607b0d251b7dbad956990fa5280ef43a9092cd22e8a1ce023f06ec175719c7c68c78195029814d9c18f994838697f2f71c5d41223a7614264377f10a782fd0f5a30c12275ce5e674eb8532e376c4aaacd69e285de52612470b8b9294759719d411e2c92c4c917ed2b980f74e7337c45679cf", 0x9b}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)="0de631d6c55ce2e4a5", 0x9}, {&(0x7f0000002bc0)="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", 0x1000}, {&(0x7f0000003bc0)="6a3d1bd109951c15f729d1843a358a7c41845850f85b22362d8463722ab34a0b76ca815b9eaaa4e04b925a8a5dbec0b420f025772f25194dab9befbc6ecc2027f3f3f6ccde4a5911778f76b859d31e9fcf09d8b9e798a55fdcd585339b8afa62", 0x60}], 0x7, &(0x7f0000003cc0), 0x0, 0xa040001}, {&(0x7f0000003d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003d80)="469f906d0084f3faa0abaac40f96b5f96a47ec202a0d316bfa20157f671965638bb3730d298b38aadc986ea4f4df3614aa6a974bb7bc9a87d8feacca6d9eba0d62b15c80d560e6407acc9f96e7251f5992c8db432cc987d587f30bdd9f2458b9b9be8c705393792fb6c2b8c6e0c1261c0dbcef458aa789446f39b40a5f1e9a4b752642ee1185976d7d3a77c46ce72f259a3432930c9ddb54011a2cc70b6d316ee0749bf416ae9a938bc5f99ab9365e50f0f9bb4eb82a5f1a49dc2a10d11daa4091b4dacd7f5de3bfef78577e0c1ea9faf0650197e60d6a39c5a2a0f0e930e0d9e42b792f60cfd896ac4254d234", 0xed}, {&(0x7f0000003e80)="43e1512ef716910d29fe6666b4852b112eae2304880d03349289ec594a8ae4f76a00cf4d63cea4c5b755247b663ee85352756bd52790f2f6de507d4a215ace9e5b08d613490ee21631bb74", 0x4b}, {&(0x7f0000003f00)="a102621c4d6282021d5305b80d", 0xd}, {&(0x7f0000003f40)="0bca457762b07f83a2d65e423e13a76e2618c745a4291af6cd385da411a712783b07874981bc5957fd4bfe4cc4729d637d4da160edf54ce706d457375a44108f0e9ec93ff30ad4cbccc8e9d240badc91b3fa8e67f818832f626bbeb3fc7a7305426fc0abe1bb4ae2eae8fa4856b7aa185fc9932b8833ba89d9534a00083810e2c2330e119356bb0497493eed62a8f76d89e715c16e97b3fb04940b4addd67b657165313523d45196fc5cfa1e6c081d40385ecd9e80fbd2d7612468b35c25", 0xbe}, {&(0x7f0000004000)="1c36a6dd491dd6b89e244ef8b87a727ed8ed36de1aa67445333c70aef799060ef12b0b5c047b876cc77c11eb0745849a96688f21a39c100e1efd2299982b2c928e275f30096178acdbc8ec60521822ac516ad5e56235727e428208064daa5c689060b366ce364b62c859732378c077dcc7bbfa57aa479201d9e46cf1b852d47728b838aba5b2e76edfd30302c7e2cb9d715025bfc86bbb0c4695896927dffbeb46c369ab25e1", 0xa6}], 0x5, &(0x7f0000004200)=[@cred={{0x1c, 0x1, 0x2, {r43, r44, r45}}}], 0x20, 0x440c0}], 0x7, 0x0) ioctl$TIOCCBRK(r2, 0x5428) r46 = socket(0x10, 0x3, 0x0) r47 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r46, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r47, 0x1}, 0x14}}, 0x0) 04:57:04 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40), 0x4000) r10 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r10) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r11 = accept4(r1, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r12, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) 04:57:05 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007fffeffd) 04:57:05 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c00020005000100000000001400010008000100000000000800020000000000080007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 410.155512][ C1] scsi_io_completion_action: 4 callbacks suppressed [ 410.155638][ C1] sd 0:0:1:0: [sg0] tag#4445 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 410.173243][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB: Test Unit Ready [ 410.180107][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.189979][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.199956][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.209829][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.219734][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.229583][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.239539][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.249783][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.259722][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.269676][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.279501][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.289386][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:57:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @broadcast}, &(0x7f00000000c0)=0xc) connect$packet(r7, &(0x7f0000000100)={0x11, 0x5, r8, 0x1, 0x52}, 0x14) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x2, 0x70bd2a, 0x200}, 0x14}}, 0x0) 04:57:05 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc020660b, &(0x7f0000000040)=0xfffffffac00) [ 410.289495][T12864] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.299195][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.299294][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.328061][ C1] sd 0:0:1:0: [sg0] tag#4445 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:05 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 410.637477][ C1] sd 0:0:1:0: [sg0] tag#4446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 410.648127][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB: Test Unit Ready [ 410.654948][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.664859][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.674770][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.684742][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.694592][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.704438][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.714244][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.724226][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:57:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) close(r0) [ 410.734313][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.744179][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.754169][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.763930][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.774035][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:57:05 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) [ 410.783779][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.793649][ C1] sd 0:0:1:0: [sg0] tag#4446 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000000)=0x1) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) 04:57:06 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() r10 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r10) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r11 = accept4(r1, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r12, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 411.082029][ C0] sd 0:0:1:0: [sg0] tag#4447 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 411.092762][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB: Test Unit Ready [ 411.099488][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.110448][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.120362][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.130353][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.140188][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.150093][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.160054][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.170030][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.179869][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.189786][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.199966][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.209918][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.219907][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:57:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x66040, 0x0) r9 = inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x10000080) inotify_rm_watch(r8, r9) [ 411.229751][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.239595][ C0] sd 0:0:1:0: [sg0] tag#4447 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:06 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007fffeffd) [ 411.480904][ C1] sd 0:0:1:0: [sg0] tag#4448 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 411.491543][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB: Test Unit Ready [ 411.498292][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.508138][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.518016][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.527843][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.537753][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.547623][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.557437][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.567311][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.577121][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.587352][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.597168][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.607063][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.616885][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.626712][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.636700][ C1] sd 0:0:1:0: [sg0] tag#4448 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 04:57:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000040)=""/145, 0x91}], 0x1, 0x0) mkdir(0x0, 0xc7) 04:57:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x8, 0xd, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) [ 411.849329][ C0] sd 0:0:1:0: [sg0] tag#4449 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 411.860171][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB: Test Unit Ready [ 411.866980][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.876978][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.886894][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.896956][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.906882][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.916896][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.926796][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.936800][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.946688][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.956591][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.966600][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.976512][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 411.986432][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:57:06 executing program 3: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9], 0x14}, 0x0) geteuid() r10 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r10) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r11 = accept4(r1, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007fffeffd) write$binfmt_elf64(r12, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 411.996962][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.007180][ C0] sd 0:0:1:0: [sg0] tag#4449 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:07 executing program 5: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 04:57:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r5, 0x7fff, 0x44) 04:57:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 412.206987][ C0] sd 0:0:1:0: [sg0] tag#4450 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.217832][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB: Test Unit Ready [ 412.224615][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.234494][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.244328][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.254234][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.264090][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.273851][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.283704][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.293548][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.303385][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.313330][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.323181][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.333108][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.343020][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:57:07 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007fffeffd) [ 412.352848][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.362698][ C0] sd 0:0:1:0: [sg0] tag#4450 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.597181][ C1] sd 0:0:1:0: [sg0] tag#4451 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.607798][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB: Test Unit Ready [ 412.614528][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.625289][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.635304][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.645250][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.655057][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.664918][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.674945][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.684843][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.694794][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.704945][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.714897][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.724732][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.734589][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:57:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 04:57:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) statx(r20, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r21}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r22}, {}, {0x8, 0x3, r23}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r24 = accept4(r2, 0x0, 0x0, 0x0) r25 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r24, r25, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r25, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 412.744489][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.754338][ C1] sd 0:0:1:0: [sg0] tag#4451 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:57:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x40400000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000240)={r7, 0x80000001, 0x10000, 0x3, 0x4, 0x4, 0xfb, 0x6, {r8, @in6={{0xa, 0x4e23, 0x81eb, @mcast2, 0x4}}, 0x1000, 0x1, 0x1, 0x3, 0x400}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000000c0)={r8, 0xa0, "36fa99d3d2004c4fc6dac24efe875c24e15afcb155b0e154cab34b3a136583bc1f6720ea97a8454e1730f88917dea1f87087a3cd761daea1c6725c66c355596a00a5023b0d15335255679fdb402c8078ee41448381a03ff3be727c3938964697de107e110d073e72a5abb35ae7e6af30305aec31f2c99a8e4ce520eb2061fe38b9530d193f993d215b67f73464b881abfad54b445334fda169f2233dec09b863"}, &(0x7f0000000000)=0xa8) [ 412.894834][ C0] sd 0:0:1:0: [sg0] tag#4453 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 412.905650][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB: Test Unit Ready [ 412.912352][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.922255][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.932111][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.932398][T12932] ===================================================== [ 412.941928][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.948677][T12932] BUG: KMSAN: uninit-value in __tipc_nl_compat_dumpit+0x58b/0x1290 [ 412.948696][T12932] CPU: 1 PID: 12932 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 412.948704][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.948709][T12932] Call Trace: [ 412.948733][T12932] dump_stack+0x1c9/0x220 [ 412.948816][T12932] kmsan_report+0xf7/0x1e0 [ 412.958560][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.966261][T12932] __msan_warning+0x58/0xa0 [ 412.966281][T12932] __tipc_nl_compat_dumpit+0x58b/0x1290 [ 412.966296][T12932] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 412.966310][T12932] ? kmsan_get_metadata+0x11d/0x180 [ 412.966326][T12932] ? kmsan_set_origin_checked+0x95/0xf0 [ 412.966368][T12932] ? kmsan_get_metadata+0x11d/0x180 [ 412.975321][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.985286][T12932] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 412.985307][T12932] ? __alloc_skb+0x762/0xac0 [ 412.985340][T12932] tipc_nl_compat_dumpit+0x761/0x910 [ 412.985368][T12932] tipc_nl_compat_recv+0x1382/0x2940 [ 412.985407][T12932] ? kmsan_get_metadata+0x4f/0x180 [ 412.988793][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.993055][T12932] ? tipc_nl_node_reset_link_stats+0x600/0x600 [ 412.997691][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.007018][T12932] ? tipc_nl_compat_bearer_disable+0x4b0/0x4b0 [ 413.007057][T12932] ? tipc_netlink_compat_stop+0x40/0x40 [ 413.007071][T12932] genl_rcv_msg+0x205e/0x2460 [ 413.007135][T12932] netlink_rcv_skb+0x451/0x650 [ 413.011996][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.017434][T12932] ? genl_unbind+0x380/0x380 [ 413.017459][T12932] genl_rcv+0x63/0x80 [ 413.017495][T12932] netlink_unicast+0xf9e/0x1100 [ 413.017514][T12932] ? genl_pernet_exit+0x90/0x90 [ 413.017564][T12932] netlink_sendmsg+0x1248/0x14d0 [ 413.023467][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.028581][T12932] ? netlink_getsockopt+0x1440/0x1440 [ 413.028596][T12932] ____sys_sendmsg+0x12b6/0x1350 [ 413.028627][T12932] __sys_sendmsg+0x451/0x5f0 [ 413.028683][T12932] ? kmsan_copy_to_user+0x81/0x90 [ 413.034415][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.039489][T12932] ? kmsan_get_metadata+0x11d/0x180 [ 413.049213][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.054820][T12932] ? kmsan_get_metadata+0x11d/0x180 [ 413.054838][T12932] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 413.054854][T12932] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 413.054870][T12932] ? prepare_exit_to_usermode+0x1ca/0x520 [ 413.054893][T12932] __se_sys_sendmsg+0x97/0xb0 [ 413.054930][T12932] __x64_sys_sendmsg+0x4a/0x70 [ 413.059602][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.064780][T12932] do_syscall_64+0xb8/0x160 [ 413.064802][T12932] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 413.064814][T12932] RIP: 0033:0x45c6b9 [ 413.064830][T12932] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.064837][T12932] RSP: 002b:00007f8ee56dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.064857][T12932] RAX: ffffffffffffffda RBX: 00007f8ee56db6d4 RCX: 000000000045c6b9 [ 413.064890][T12932] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000005 [ 413.071341][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.076335][T12932] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 413.076344][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 413.076353][T12932] R13: 00000000000009a0 R14: 00000000004d5760 R15: 000000000076bf2c [ 413.076372][T12932] 04:57:08 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017819820000000003b08f403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c9537d9c9b71d2c0945c08ba8c56afc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627da1af58"], 0xc5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xc, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8], 0x1c}, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873eb95845cc9a000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r11], 0x1c}, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000c2873e", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13], 0x14}, 0x0) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) statx(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x1000, 0xfff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x9}, {0x2, 0x0, r4}, {0x2, 0x3, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r13}, {0x2, 0x0, r14}], {0x4, 0x2}, [{0x8, 0x7, r15}, {0x8, 0x3, r16}, {0x8, 0x2, r17}, {0x8, 0x0, r18}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r19}, {}, {0x8, 0x3, r20}], {0x10, 0x2}}, 0xac, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r21 = accept4(r2, 0x0, 0x0, 0x0) r22 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r21, r22, 0x0, 0x1000007fffeffd) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=')system\x94eth1\x00', 0xfffffffffffffffc) write$binfmt_elf64(r22, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x80, 0x8, 0xb6, 0x416bfa8, 0x1, 0x3, 0x6, 0x6c, 0x40, 0x37a, 0x7, 0xed43, 0x38, 0x2, 0x84, 0x6, 0x2}, [{0x6474e551, 0x40, 0x83, 0x5, 0x96, 0xb4b6, 0x1, 0x9b2}, {0x3, 0xfffffff8, 0x5a9b, 0x3, 0x7, 0xaff, 0x9, 0xfff}], "1f8e49c873a482be7eeda9048284a46e3cd0bfca8bbfb5a728e260309ae64e7791ae225cf06337ff87185671d416734b8d4241148028210940e4697a77dcb4d66d19ea9166c934466a5c043d0ad7d4a3b0a4d1fe66aa3c41d6d5c2f4137df2ac8f54ac2ed25e398b994d590976677ac0f23258d8570a5002d2b2652f45411642f55c9c3c12710602e6108e90b9054242542a396c4ffe955e7fd682b9cd223abc571d65c0e44ea9ce15b5f5c76aa39c3f8108b7140a8addde6db2fa5b28faa39179", [[], [], [], [], []]}, 0x671) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) [ 413.076376][T12932] Uninit was created at: [ 413.076394][T12932] kmsan_internal_poison_shadow+0x66/0xd0 [ 413.076406][T12932] kmsan_slab_alloc+0x8a/0xe0 [ 413.076421][T12932] __kmalloc_node_track_caller+0xb40/0x1200 [ 413.076503][T12932] __alloc_skb+0x2fd/0xac0 [ 413.086228][ C0] sd 0:0:1:0: [sg0] tag#4453 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 413.092283][T12932] tipc_nl_compat_dumpit+0x6e4/0x910 [ 413.384723][T12932] tipc_nl_compat_recv+0x1382/0x2940 [ 413.390015][T12932] genl_rcv_msg+0x205e/0x2460 [ 413.394704][T12932] netlink_rcv_skb+0x451/0x650 [ 413.399460][T12932] genl_rcv+0x63/0x80 [ 413.403447][T12932] netlink_unicast+0xf9e/0x1100 [ 413.408285][T12932] netlink_sendmsg+0x1248/0x14d0 [ 413.413206][T12932] ____sys_sendmsg+0x12b6/0x1350 [ 413.418215][T12932] __sys_sendmsg+0x451/0x5f0 [ 413.422789][T12932] __se_sys_sendmsg+0x97/0xb0 [ 413.427452][T12932] __x64_sys_sendmsg+0x4a/0x70 [ 413.432202][T12932] do_syscall_64+0xb8/0x160 [ 413.436694][T12932] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 413.442571][T12932] ===================================================== [ 413.449493][T12932] Disabling lock debugging due to kernel taint [ 413.455628][T12932] Kernel panic - not syncing: panic_on_warn set ... [ 413.462205][T12932] CPU: 1 PID: 12932 Comm: syz-executor.1 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 413.472244][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.483074][T12932] Call Trace: [ 413.486386][T12932] dump_stack+0x1c9/0x220 [ 413.490712][T12932] panic+0x3d5/0xc3e [ 413.494619][T12932] kmsan_report+0x1df/0x1e0 [ 413.499116][T12932] __msan_warning+0x58/0xa0 [ 413.503614][T12932] __tipc_nl_compat_dumpit+0x58b/0x1290 [ 413.509163][T12932] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 413.514966][T12932] ? kmsan_get_metadata+0x11d/0x180 [ 413.520156][T12932] ? kmsan_set_origin_checked+0x95/0xf0 [ 413.525695][T12932] ? kmsan_get_metadata+0x11d/0x180 [ 413.530900][T12932] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 413.536723][T12932] ? __alloc_skb+0x762/0xac0 [ 413.541320][T12932] tipc_nl_compat_dumpit+0x761/0x910 [ 413.546611][T12932] tipc_nl_compat_recv+0x1382/0x2940 [ 413.551892][T12932] ? kmsan_get_metadata+0x4f/0x180 [ 413.557003][T12932] ? tipc_nl_node_reset_link_stats+0x600/0x600 [ 413.563150][T12932] ? tipc_nl_compat_bearer_disable+0x4b0/0x4b0 [ 413.569298][T12932] ? tipc_netlink_compat_stop+0x40/0x40 [ 413.574835][T12932] genl_rcv_msg+0x205e/0x2460 [ 413.579530][T12932] netlink_rcv_skb+0x451/0x650 [ 413.584295][T12932] ? genl_unbind+0x380/0x380 [ 413.588881][T12932] genl_rcv+0x63/0x80 [ 413.592862][T12932] netlink_unicast+0xf9e/0x1100 [ 413.597705][T12932] ? genl_pernet_exit+0x90/0x90 [ 413.602551][T12932] netlink_sendmsg+0x1248/0x14d0 [ 413.607496][T12932] ? netlink_getsockopt+0x1440/0x1440 [ 413.612852][T12932] ____sys_sendmsg+0x12b6/0x1350 [ 413.617796][T12932] __sys_sendmsg+0x451/0x5f0 [ 413.622387][T12932] ? kmsan_copy_to_user+0x81/0x90 [ 413.627399][T12932] ? kmsan_get_metadata+0x11d/0x180 [ 413.632590][T12932] ? kmsan_get_metadata+0x11d/0x180 [ 413.637777][T12932] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 413.643670][T12932] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 413.649725][T12932] ? prepare_exit_to_usermode+0x1ca/0x520 [ 413.655442][T12932] __se_sys_sendmsg+0x97/0xb0 [ 413.660114][T12932] __x64_sys_sendmsg+0x4a/0x70 [ 413.664867][T12932] do_syscall_64+0xb8/0x160 [ 413.669379][T12932] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 413.675266][T12932] RIP: 0033:0x45c6b9 [ 413.679151][T12932] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.698754][T12932] RSP: 002b:00007f8ee56dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.707356][T12932] RAX: ffffffffffffffda RBX: 00007f8ee56db6d4 RCX: 000000000045c6b9 [ 413.715319][T12932] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000005 [ 413.723283][T12932] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 413.731255][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 413.739226][T12932] R13: 00000000000009a0 R14: 00000000004d5760 R15: 000000000076bf2c [ 413.748676][T12932] Kernel Offset: 0xf200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 413.760214][T12932] Rebooting in 86400 seconds..