0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:20 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00"/493], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:20 executing program 3 (fault-call:14 fault-nth:2): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:20 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x600, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:20 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x14, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:20 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x2, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1951.573072][ T6620] FAULT_INJECTION: forcing a failure. [ 1951.573072][ T6620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1951.586374][ T6620] CPU: 1 PID: 6620 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1951.596448][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1951.606536][ T6620] Call Trace: [ 1951.609906][ T6620] dump_stack_lvl+0xb7/0x103 [ 1951.614520][ T6620] dump_stack+0x11/0x1a [ 1951.618851][ T6620] should_fail+0x23c/0x250 [ 1951.623270][ T6620] __alloc_pages+0x102/0x320 [ 1951.627847][ T6620] alloc_pages+0x2e8/0x340 [ 1951.632648][ T6620] skb_page_frag_refill+0x9a/0x1b0 [ 1951.637815][ T6620] sk_page_frag_refill+0x31/0x120 [ 1951.642899][ T6620] __ip_append_data+0xbc4/0x1dc0 [ 1951.647894][ T6620] ? raw_send_hdrinc+0xa60/0xa60 [ 1951.652843][ T6620] ? raw_send_hdrinc+0xa60/0xa60 [ 1951.657780][ T6620] ip_append_data+0x126/0x150 [ 1951.662798][ T6620] raw_sendmsg+0xa2e/0xc20 [ 1951.667221][ T6620] inet_sendmsg+0x5f/0x80 [ 1951.671552][ T6620] __sys_sendto+0x2a8/0x370 [ 1951.676119][ T6620] ? __cond_resched+0x11/0x40 [ 1951.680800][ T6620] ? fput+0x2d/0x130 [ 1951.684860][ T6620] __x64_sys_sendto+0x74/0x90 [ 1951.689539][ T6620] do_syscall_64+0x3d/0x90 [ 1951.693952][ T6620] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1951.699888][ T6620] RIP: 0033:0x4665e9 [ 1951.703843][ T6620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:15:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x409f0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:20 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x1400, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00"/493], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:20 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:20 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x3, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1951.723449][ T6620] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1951.731899][ T6620] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1951.739869][ T6620] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1951.747928][ T6620] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1951.755898][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1951.763982][ T6620] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:20 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x2900, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00"/493], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:20 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x600, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:20 executing program 3 (fault-call:14 fault-nth:3): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:20 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x1000000, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:20 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x6, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:20 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x2000000, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1952.062316][ T6694] FAULT_INJECTION: forcing a failure. [ 1952.062316][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.075050][ T6694] CPU: 1 PID: 6694 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1952.085117][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1952.095236][ T6694] Call Trace: [ 1952.098517][ T6694] dump_stack_lvl+0xb7/0x103 [ 1952.103123][ T6694] dump_stack+0x11/0x1a [ 1952.107267][ T6694] should_fail+0x23c/0x250 [ 1952.111777][ T6694] __should_failslab+0x81/0x90 [ 1952.116707][ T6694] should_failslab+0x5/0x20 [ 1952.121239][ T6694] kmem_cache_alloc_node+0x58/0x2b0 [ 1952.126528][ T6694] ? ip_generic_getfrag+0x14a/0x1b0 [ 1952.131746][ T6694] ? __alloc_skb+0xed/0x420 [ 1952.136250][ T6694] __alloc_skb+0xed/0x420 [ 1952.140576][ T6694] __ip_append_data+0x13cd/0x1dc0 [ 1952.145594][ T6694] ? raw_send_hdrinc+0xa60/0xa60 [ 1952.150669][ T6694] ? raw_send_hdrinc+0xa60/0xa60 [ 1952.155761][ T6694] ip_append_data+0x126/0x150 11:15:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x40fa0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100"/575], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x6000000, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:21 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x1400, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:21 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0xe, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1952.160678][ T6694] raw_sendmsg+0xa2e/0xc20 [ 1952.165146][ T6694] inet_sendmsg+0x5f/0x80 [ 1952.169492][ T6694] __sys_sendto+0x2a8/0x370 [ 1952.174006][ T6694] ? __cond_resched+0x11/0x40 [ 1952.178687][ T6694] ? fput+0x2d/0x130 [ 1952.182599][ T6694] __x64_sys_sendto+0x74/0x90 [ 1952.187278][ T6694] do_syscall_64+0x3d/0x90 [ 1952.191698][ T6694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1952.197600][ T6694] RIP: 0033:0x4665e9 [ 1952.201491][ T6694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.221208][ T6694] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1952.229642][ T6694] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1952.237615][ T6694] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1952.245592][ T6694] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1952.253562][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1952.261534][ T6694] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x14000000, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100"/575], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:21 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x2900, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:21 executing program 3 (fault-call:14 fault-nth:4): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:21 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0xf, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x29000000, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0xa4ffffff, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1952.565773][ T6779] FAULT_INJECTION: forcing a failure. [ 1952.565773][ T6779] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.578463][ T6779] CPU: 1 PID: 6779 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1952.588530][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1952.598582][ T6779] Call Trace: [ 1952.601852][ T6779] dump_stack_lvl+0xb7/0x103 [ 1952.606443][ T6779] dump_stack+0x11/0x1a [ 1952.610689][ T6779] should_fail+0x23c/0x250 [ 1952.615229][ T6779] __should_failslab+0x81/0x90 [ 1952.620015][ T6779] should_failslab+0x5/0x20 [ 1952.624539][ T6779] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1952.630436][ T6779] ? __kmalloc_node_track_caller+0x30/0x40 [ 1952.636289][ T6779] __kmalloc_node_track_caller+0x30/0x40 [ 1952.641944][ T6779] ? __ip_append_data+0x13cd/0x1dc0 [ 1952.647144][ T6779] __alloc_skb+0x187/0x420 [ 1952.651556][ T6779] __ip_append_data+0x13cd/0x1dc0 [ 1952.656585][ T6779] ? raw_send_hdrinc+0xa60/0xa60 11:15:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x50550000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100"/575], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:21 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x1000000, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0xffffffa4, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:21 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1b, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1952.661576][ T6779] ? raw_send_hdrinc+0xa60/0xa60 [ 1952.666603][ T6779] ip_append_data+0x126/0x150 [ 1952.671274][ T6779] raw_sendmsg+0xa2e/0xc20 [ 1952.675741][ T6779] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 1952.681350][ T6779] inet_sendmsg+0x5f/0x80 [ 1952.685673][ T6779] __sys_sendto+0x2a8/0x370 [ 1952.690223][ T6779] ? __cond_resched+0x11/0x40 [ 1952.694901][ T6779] ? fput+0x2d/0x130 [ 1952.698802][ T6779] __x64_sys_sendto+0x74/0x90 [ 1952.703476][ T6779] do_syscall_64+0x3d/0x90 [ 1952.707972][ T6779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1952.713880][ T6779] RIP: 0033:0x4665e9 [ 1952.717920][ T6779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.737699][ T6779] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1952.746104][ T6779] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1952.754096][ T6779] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 11:15:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100"/616], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) [ 1952.762152][ T6779] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1952.770148][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1952.778117][ T6779] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:21 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0xfe, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:21 executing program 3 (fault-call:14 fault-nth:5): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:21 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x6000000, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x3, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100"/616], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) [ 1953.006616][ T6844] FAULT_INJECTION: forcing a failure. [ 1953.006616][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.019456][ T6844] CPU: 1 PID: 6844 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1953.030130][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1953.040314][ T6844] Call Trace: [ 1953.043587][ T6844] dump_stack_lvl+0xb7/0x103 [ 1953.048178][ T6844] dump_stack+0x11/0x1a [ 1953.052327][ T6844] should_fail+0x23c/0x250 [ 1953.056741][ T6844] __should_failslab+0x81/0x90 [ 1953.061553][ T6844] should_failslab+0x5/0x20 [ 1953.066050][ T6844] kmem_cache_alloc_node+0x58/0x2b0 [ 1953.071260][ T6844] ? ip_generic_getfrag+0x14a/0x1b0 [ 1953.076462][ T6844] ? __alloc_skb+0xed/0x420 [ 1953.080968][ T6844] __alloc_skb+0xed/0x420 [ 1953.085293][ T6844] __ip_append_data+0x13cd/0x1dc0 [ 1953.090316][ T6844] ? raw_send_hdrinc+0xa60/0xa60 [ 1953.095344][ T6844] ? raw_send_hdrinc+0xa60/0xa60 [ 1953.100284][ T6844] ip_append_data+0x126/0x150 [ 1953.104959][ T6844] raw_sendmsg+0xa2e/0xc20 [ 1953.109375][ T6844] inet_sendmsg+0x5f/0x80 [ 1953.113764][ T6844] __sys_sendto+0x2a8/0x370 [ 1953.118279][ T6844] ? __cond_resched+0x11/0x40 [ 1953.122961][ T6844] ? fput+0x2d/0x130 [ 1953.126892][ T6844] __x64_sys_sendto+0x74/0x90 [ 1953.131696][ T6844] do_syscall_64+0x3d/0x90 [ 1953.136172][ T6844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1953.142067][ T6844] RIP: 0033:0x4665e9 [ 1953.145946][ T6844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.165551][ T6844] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1953.173965][ T6844] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1953.181928][ T6844] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1953.189898][ T6844] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1953.197864][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:15:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x50b00000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x4, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:22 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x2b9, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:22 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x14000000, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1953.205866][ T6844] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x5, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:22 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100"/616], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x6, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1953.309291][ C0] scsi_io_completion_action: 10 callbacks suppressed [ 1953.309315][ C0] sd 0:0:1:0: [sg0] tag#524 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1953.326303][ C0] sd 0:0:1:0: [sg0] tag#524 CDB: opcode=0xe5 (vendor) [ 1953.333093][ C0] sd 0:0:1:0: [sg0] tag#524 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1953.342769][ C0] sd 0:0:1:0: [sg0] tag#524 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1953.352258][ C0] sd 0:0:1:0: [sg0] tag#524 CDB[20]: ba 11:15:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x7, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:22 executing program 3 (fault-call:14 fault-nth:6): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:22 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x29000000, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:22 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/637], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:22 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x300, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1953.509086][ T6922] FAULT_INJECTION: forcing a failure. [ 1953.509086][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.521708][ T6922] CPU: 1 PID: 6922 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1953.531783][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1953.541876][ T6922] Call Trace: [ 1953.545143][ T6922] dump_stack_lvl+0xb7/0x103 [ 1953.549791][ T6922] dump_stack+0x11/0x1a [ 1953.554009][ T6922] should_fail+0x23c/0x250 [ 1953.558662][ T6922] __should_failslab+0x81/0x90 [ 1953.563419][ T6922] should_failslab+0x5/0x20 [ 1953.568001][ T6922] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1953.573722][ T6922] ? __kmalloc_node_track_caller+0x30/0x40 [ 1953.579701][ T6922] __kmalloc_node_track_caller+0x30/0x40 [ 1953.585417][ T6922] ? __ip_append_data+0x13cd/0x1dc0 [ 1953.590614][ T6922] __alloc_skb+0x187/0x420 [ 1953.595159][ T6922] __ip_append_data+0x13cd/0x1dc0 [ 1953.600192][ T6922] ? raw_send_hdrinc+0xa60/0xa60 [ 1953.605147][ T6922] ? raw_send_hdrinc+0xa60/0xa60 [ 1953.610123][ T6922] ip_append_data+0x126/0x150 [ 1953.614802][ T6922] raw_sendmsg+0xa2e/0xc20 [ 1953.619232][ T6922] inet_sendmsg+0x5f/0x80 [ 1953.623585][ T6922] __sys_sendto+0x2a8/0x370 [ 1953.628085][ T6922] ? __cond_resched+0x11/0x40 [ 1953.632827][ T6922] ? fput+0x2d/0x130 [ 1953.636789][ T6922] __x64_sys_sendto+0x74/0x90 [ 1953.641540][ T6922] do_syscall_64+0x3d/0x90 [ 1953.645959][ T6922] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1953.651953][ T6922] RIP: 0033:0x4665e9 [ 1953.655837][ T6922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.675452][ T6922] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1953.683944][ T6922] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1953.691909][ T6922] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1953.697493][ C0] sd 0:0:1:0: [sg0] tag#525 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1953.699875][ T6922] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1953.699890][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1953.710147][ C0] sd 0:0:1:0: [sg0] tag#525 CDB: opcode=0xe5 (vendor) [ 1953.710167][ C0] sd 0:0:1:0: [sg0] tag#525 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1953.718105][ T6922] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1953.726087][ C0] sd 0:0:1:0: [sg0] tag#525 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 11:15:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x60000000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x8, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:22 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0xa4ffffff, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:22 executing program 3 (fault-call:14 fault-nth:7): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:22 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/637], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:22 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x900, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1953.760208][ C0] sd 0:0:1:0: [sg0] tag#525 CDB[20]: ba 11:15:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xa, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:22 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/637], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xb, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:22 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0xffffffa4, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xc, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1953.966368][ C0] sd 0:0:1:0: [sg0] tag#526 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1953.976669][ C0] sd 0:0:1:0: [sg0] tag#526 CDB: opcode=0xe5 (vendor) [ 1953.983451][ C0] sd 0:0:1:0: [sg0] tag#526 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1953.993099][ C0] sd 0:0:1:0: [sg0] tag#526 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1954.002571][ C0] sd 0:0:1:0: [sg0] tag#526 CDB[20]: ba [ 1954.117619][ T7025] FAULT_INJECTION: forcing a failure. [ 1954.117619][ T7025] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.130444][ T7025] CPU: 1 PID: 7025 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1954.140613][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1954.150782][ T7025] Call Trace: [ 1954.154065][ T7025] dump_stack_lvl+0xb7/0x103 [ 1954.158758][ T7025] dump_stack+0x11/0x1a [ 1954.162913][ T7025] should_fail+0x23c/0x250 11:15:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xd, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1954.167337][ T7025] __should_failslab+0x81/0x90 [ 1954.172093][ T7025] should_failslab+0x5/0x20 [ 1954.176600][ T7025] kmem_cache_alloc_node+0x58/0x2b0 [ 1954.181939][ T7025] ? ip_generic_getfrag+0x14a/0x1b0 [ 1954.187243][ T7025] ? __alloc_skb+0xed/0x420 [ 1954.191762][ T7025] __alloc_skb+0xed/0x420 [ 1954.196204][ T7025] __ip_append_data+0x13cd/0x1dc0 [ 1954.201231][ T7025] ? raw_send_hdrinc+0xa60/0xa60 [ 1954.206173][ T7025] ? raw_send_hdrinc+0xa60/0xa60 [ 1954.211184][ T7025] ip_append_data+0x126/0x150 [ 1954.215965][ T7025] raw_sendmsg+0xa2e/0xc20 [ 1954.220383][ T7025] inet_sendmsg+0x5f/0x80 [ 1954.224743][ T7025] __sys_sendto+0x2a8/0x370 [ 1954.229249][ T7025] ? __cond_resched+0x11/0x40 [ 1954.234014][ T7025] ? fput+0x2d/0x130 [ 1954.238086][ T7025] __x64_sys_sendto+0x74/0x90 [ 1954.242895][ T7025] do_syscall_64+0x3d/0x90 [ 1954.247350][ T7025] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1954.253262][ T7025] RIP: 0033:0x4665e9 [ 1954.257158][ T7025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1954.260686][ C0] sd 0:0:1:0: [sg0] tag#527 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1954.277496][ T7025] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1954.277518][ T7025] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1954.287792][ C0] sd 0:0:1:0: [sg0] tag#527 CDB: opcode=0xe5 (vendor) 11:15:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x600b0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:23 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xf, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:23 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0xfffe, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:23 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/647], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:23 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:23 executing program 3 (fault-call:14 fault-nth:8): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1954.296580][ T7025] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1954.304572][ C0] sd 0:0:1:0: [sg0] tag#527 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1954.311262][ T7025] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1954.311276][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1954.311287][ T7025] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1954.319258][ C0] sd 0:0:1:0: [sg0] tag#527 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1954.362361][ C0] sd 0:0:1:0: [sg0] tag#527 CDB[20]: ba [ 1954.396619][ T7043] FAULT_INJECTION: forcing a failure. [ 1954.396619][ T7043] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.409262][ T7043] CPU: 1 PID: 7043 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1954.419528][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1954.429702][ T7043] Call Trace: [ 1954.433040][ T7043] dump_stack_lvl+0xb7/0x103 [ 1954.437712][ T7043] dump_stack+0x11/0x1a [ 1954.441877][ T7043] should_fail+0x23c/0x250 [ 1954.448631][ T7043] __should_failslab+0x81/0x90 [ 1954.453481][ T7043] should_failslab+0x5/0x20 [ 1954.457992][ T7043] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1954.463981][ T7043] ? __kmalloc_node_track_caller+0x30/0x40 [ 1954.470156][ T7043] __kmalloc_node_track_caller+0x30/0x40 [ 1954.476157][ T7043] ? __ip_append_data+0x13cd/0x1dc0 [ 1954.481364][ T7043] __alloc_skb+0x187/0x420 [ 1954.485789][ T7043] __ip_append_data+0x13cd/0x1dc0 [ 1954.490821][ T7043] ? raw_send_hdrinc+0xa60/0xa60 [ 1954.496005][ T7043] ? raw_send_hdrinc+0xa60/0xa60 [ 1954.501078][ T7043] ip_append_data+0x126/0x150 [ 1954.505766][ T7043] raw_sendmsg+0xa2e/0xc20 [ 1954.510359][ T7043] inet_sendmsg+0x5f/0x80 [ 1954.514692][ T7043] __sys_sendto+0x2a8/0x370 [ 1954.519463][ T7043] ? __cond_resched+0x11/0x40 [ 1954.524142][ T7043] ? fput+0x2d/0x130 [ 1954.528124][ T7043] __x64_sys_sendto+0x74/0x90 [ 1954.532801][ T7043] do_syscall_64+0x3d/0x90 [ 1954.537231][ T7043] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1954.543141][ T7043] RIP: 0033:0x4665e9 11:15:23 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x3, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1954.547024][ T7043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1954.559252][ C0] sd 0:0:1:0: [sg0] tag#528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1954.566641][ T7043] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1954.576920][ C0] sd 0:0:1:0: [sg0] tag#528 CDB: opcode=0xe5 (vendor) [ 1954.585286][ T7043] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1954.592057][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1954.599990][ T7043] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1954.600005][ T7043] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1954.609650][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1954.617588][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:15:23 executing program 3 (fault-call:14 fault-nth:9): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1954.617602][ T7043] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1954.625737][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[20]: ba [ 1954.684095][ T7059] FAULT_INJECTION: forcing a failure. [ 1954.684095][ T7059] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.696748][ T7059] CPU: 1 PID: 7059 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1954.707064][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1954.717462][ T7059] Call Trace: [ 1954.720733][ T7059] dump_stack_lvl+0xb7/0x103 [ 1954.725332][ T7059] dump_stack+0x11/0x1a [ 1954.730101][ T7059] should_fail+0x23c/0x250 [ 1954.734705][ T7059] __should_failslab+0x81/0x90 [ 1954.739650][ T7059] should_failslab+0x5/0x20 [ 1954.744330][ T7059] kmem_cache_alloc_node+0x58/0x2b0 [ 1954.749603][ T7059] ? __alloc_skb+0xed/0x420 [ 1954.754132][ T7059] __alloc_skb+0xed/0x420 [ 1954.758554][ T7059] __ip_append_data+0x13cd/0x1dc0 [ 1954.763679][ T7059] ? raw_send_hdrinc+0xa60/0xa60 [ 1954.768792][ T7059] ? raw_send_hdrinc+0xa60/0xa60 [ 1954.773728][ T7059] ip_append_data+0x126/0x150 [ 1954.778411][ T7059] raw_sendmsg+0xa2e/0xc20 [ 1954.782868][ T7059] inet_sendmsg+0x5f/0x80 [ 1954.787264][ T7059] __sys_sendto+0x2a8/0x370 [ 1954.791851][ T7059] ? __cond_resched+0x11/0x40 [ 1954.796614][ T7059] ? fput+0x2d/0x130 [ 1954.800715][ T7059] __x64_sys_sendto+0x74/0x90 [ 1954.805451][ T7059] do_syscall_64+0x3d/0x90 [ 1954.809885][ T7059] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1954.815813][ T7059] RIP: 0033:0x4665e9 [ 1954.819697][ T7059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1954.839914][ T7059] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 11:15:23 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x4, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:23 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/647], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) [ 1954.848480][ T7059] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1954.857094][ T7059] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1954.865087][ T7059] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1954.873427][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1954.881577][ T7059] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:23 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x10, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:23 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x11, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x60660000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 1955.020865][ C0] sd 0:0:1:0: [sg0] tag#529 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1955.031888][ C0] sd 0:0:1:0: [sg0] tag#529 CDB: opcode=0xe5 (vendor) [ 1955.038869][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1955.048563][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1955.058045][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[20]: ba 11:15:23 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x12, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:24 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1f042b, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/647], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:24 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x5, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x13, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:24 executing program 3 (fault-call:14 fault-nth:10): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1955.321772][ C0] sd 0:0:1:0: [sg0] tag#530 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1955.332393][ C0] sd 0:0:1:0: [sg0] tag#530 CDB: opcode=0xe5 (vendor) [ 1955.339161][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1955.349049][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1955.358693][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[20]: ba 11:15:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x14, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x15, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/652], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) [ 1955.520041][ C0] sd 0:0:1:0: [sg0] tag#531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1955.530429][ C0] sd 0:0:1:0: [sg0] tag#531 CDB: opcode=0xe5 (vendor) [ 1955.537226][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1955.547634][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1955.557207][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[20]: ba [ 1955.655622][ T7190] FAULT_INJECTION: forcing a failure. [ 1955.655622][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.668516][ T7190] CPU: 1 PID: 7190 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1955.678584][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1955.688636][ T7190] Call Trace: [ 1955.692244][ T7190] dump_stack_lvl+0xb7/0x103 [ 1955.697143][ T7190] dump_stack+0x11/0x1a [ 1955.701410][ T7190] should_fail+0x23c/0x250 [ 1955.705920][ T7190] __should_failslab+0x81/0x90 [ 1955.710973][ T7190] should_failslab+0x5/0x20 [ 1955.715544][ T7190] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1955.721337][ T7190] ? __kmalloc_node_track_caller+0x30/0x40 [ 1955.727498][ T7190] __kmalloc_node_track_caller+0x30/0x40 [ 1955.733229][ T7190] ? __ip_append_data+0x13cd/0x1dc0 [ 1955.738426][ T7190] __alloc_skb+0x187/0x420 [ 1955.742986][ T7190] __ip_append_data+0x13cd/0x1dc0 [ 1955.748201][ T7190] ? raw_send_hdrinc+0xa60/0xa60 [ 1955.753363][ T7190] ? raw_send_hdrinc+0xa60/0xa60 [ 1955.758303][ T7190] ip_append_data+0x126/0x150 [ 1955.763069][ T7190] raw_sendmsg+0xa2e/0xc20 [ 1955.767724][ T7190] inet_sendmsg+0x5f/0x80 [ 1955.772056][ T7190] __sys_sendto+0x2a8/0x370 [ 1955.776597][ T7190] ? __cond_resched+0x11/0x40 [ 1955.781281][ T7190] ? fput+0x2d/0x130 [ 1955.785180][ T7190] __x64_sys_sendto+0x74/0x90 [ 1955.789920][ T7190] do_syscall_64+0x3d/0x90 [ 1955.794440][ T7190] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1955.800373][ T7190] RIP: 0033:0x4665e9 11:15:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x16, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:24 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x6, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x60c10000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x17, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1955.804435][ T7190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1955.824042][ T7190] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1955.829137][ C0] sd 0:0:1:0: [sg0] tag#532 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1955.832446][ T7190] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1955.832461][ T7190] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1955.842736][ C0] sd 0:0:1:0: [sg0] tag#532 CDB: opcode=0xe5 (vendor) [ 1955.842754][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1955.850879][ T7190] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1955.850893][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1955.850905][ T7190] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1955.858875][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1955.908423][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[20]: ba [ 1956.221605][ C0] sd 0:0:1:0: [sg0] tag#533 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1956.231975][ C0] sd 0:0:1:0: [sg0] tag#533 CDB: opcode=0xe5 (vendor) [ 1956.238936][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1956.248621][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1956.258086][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[20]: ba 11:15:25 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0xfffffffe, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/652], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:25 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x7, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:25 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x18, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:25 executing program 3 (fault-call:14 fault-nth:11): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x701c0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:25 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x19, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:25 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x1a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/652], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:25 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x21, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:25 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x8, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:25 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x22, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1956.687090][ T7290] FAULT_INJECTION: forcing a failure. [ 1956.687090][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 1956.700001][ T7290] CPU: 1 PID: 7290 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1956.710509][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.720566][ T7290] Call Trace: [ 1956.723934][ T7290] dump_stack_lvl+0xb7/0x103 [ 1956.728813][ T7290] dump_stack+0x11/0x1a [ 1956.732992][ T7290] should_fail+0x23c/0x250 [ 1956.737435][ T7290] __should_failslab+0x81/0x90 [ 1956.742283][ T7290] should_failslab+0x5/0x20 [ 1956.746855][ T7290] kmem_cache_alloc_node+0x58/0x2b0 [ 1956.752057][ T7290] ? ip_generic_getfrag+0x14a/0x1b0 [ 1956.757263][ T7290] ? __alloc_skb+0xed/0x420 [ 1956.761854][ T7290] __alloc_skb+0xed/0x420 [ 1956.766292][ T7290] __ip_append_data+0x13cd/0x1dc0 [ 1956.771486][ T7290] ? raw_send_hdrinc+0xa60/0xa60 [ 1956.776437][ T7290] ? raw_send_hdrinc+0xa60/0xa60 [ 1956.781430][ T7290] ip_append_data+0x126/0x150 [ 1956.786142][ T7290] raw_sendmsg+0xa2e/0xc20 [ 1956.790563][ T7290] inet_sendmsg+0x5f/0x80 [ 1956.794900][ T7290] __sys_sendto+0x2a8/0x370 [ 1956.799403][ T7290] ? __cond_resched+0x11/0x40 [ 1956.804106][ T7290] ? fput+0x2d/0x130 [ 1956.808050][ T7290] __x64_sys_sendto+0x74/0x90 [ 1956.812744][ T7290] do_syscall_64+0x3d/0x90 [ 1956.817155][ T7290] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1956.823124][ T7290] RIP: 0033:0x4665e9 [ 1956.827009][ T7290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1956.846628][ T7290] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1956.855063][ T7290] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1956.863105][ T7290] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1956.871071][ T7290] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1956.879044][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1956.887008][ T7290] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:26 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0xfffffffffffffffe, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:26 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x23, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:26 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/655], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:26 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xa, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:26 executing program 3 (fault-call:14 fault-nth:12): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x70770000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:26 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x24, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:26 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x25, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:26 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x26, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:26 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xb, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:26 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/655], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:26 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x27, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1957.655965][ T7383] FAULT_INJECTION: forcing a failure. [ 1957.655965][ T7383] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.668608][ T7383] CPU: 1 PID: 7383 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1957.678762][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1957.688839][ T7383] Call Trace: [ 1957.692112][ T7383] dump_stack_lvl+0xb7/0x103 [ 1957.696725][ T7383] dump_stack+0x11/0x1a [ 1957.700883][ T7383] should_fail+0x23c/0x250 [ 1957.705385][ T7383] __should_failslab+0x81/0x90 [ 1957.710211][ T7383] should_failslab+0x5/0x20 [ 1957.714711][ T7383] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1957.720439][ T7383] ? __kmalloc_node_track_caller+0x30/0x40 [ 1957.726337][ T7383] __kmalloc_node_track_caller+0x30/0x40 [ 1957.732100][ T7383] ? __ip_append_data+0x13cd/0x1dc0 [ 1957.737298][ T7383] __alloc_skb+0x187/0x420 [ 1957.741717][ T7383] __ip_append_data+0x13cd/0x1dc0 [ 1957.746740][ T7383] ? raw_send_hdrinc+0xa60/0xa60 [ 1957.751742][ T7383] ? raw_send_hdrinc+0xa60/0xa60 [ 1957.756690][ T7383] ip_append_data+0x126/0x150 [ 1957.761411][ T7383] raw_sendmsg+0xa2e/0xc20 [ 1957.765829][ T7383] inet_sendmsg+0x5f/0x80 [ 1957.770157][ T7383] __sys_sendto+0x2a8/0x370 [ 1957.774685][ T7383] ? __cond_resched+0x11/0x40 [ 1957.779365][ T7383] ? fput+0x2d/0x130 [ 1957.783253][ T7383] __x64_sys_sendto+0x74/0x90 [ 1957.787948][ T7383] do_syscall_64+0x3d/0x90 [ 1957.792462][ T7383] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1957.798419][ T7383] RIP: 0033:0x4665e9 [ 1957.802374][ T7383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1957.821981][ T7383] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1957.830398][ T7383] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1957.838366][ T7383] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1957.846336][ T7383] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1957.854315][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1957.862377][ T7383] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:27 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0301a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:27 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x28, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/655], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:27 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xc, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:27 executing program 3 (fault-call:14 fault-nth:13): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x70d20000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:27 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x29, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:27 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2b, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1958.377475][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 1958.377506][ C0] sd 0:0:1:0: [sg0] tag#538 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1958.394406][ C0] sd 0:0:1:0: [sg0] tag#538 CDB: opcode=0xe5 (vendor) [ 1958.401216][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1958.410697][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1958.420173][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[20]: ba 11:15:27 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2c, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:27 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0401a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:27 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xd, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/656], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:27 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:27 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/656], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) 11:15:27 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0601a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1958.614615][ T7440] FAULT_INJECTION: forcing a failure. [ 1958.614615][ T7440] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.627336][ T7440] CPU: 1 PID: 7440 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1958.637407][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.647656][ T7440] Call Trace: [ 1958.650935][ T7440] dump_stack_lvl+0xb7/0x103 [ 1958.655556][ T7440] dump_stack+0x11/0x1a [ 1958.659711][ T7440] should_fail+0x23c/0x250 [ 1958.664188][ T7440] __should_failslab+0x81/0x90 [ 1958.669042][ T7440] should_failslab+0x5/0x20 [ 1958.673547][ T7440] kmem_cache_alloc_node+0x58/0x2b0 [ 1958.679207][ T7440] ? ip_generic_getfrag+0x14a/0x1b0 [ 1958.684501][ T7440] ? __alloc_skb+0xed/0x420 [ 1958.689001][ T7440] __alloc_skb+0xed/0x420 [ 1958.693331][ T7440] __ip_append_data+0x13cd/0x1dc0 [ 1958.698349][ T7440] ? raw_send_hdrinc+0xa60/0xa60 [ 1958.703311][ T7440] ? raw_send_hdrinc+0xa60/0xa60 [ 1958.708250][ T7440] ip_append_data+0x126/0x150 [ 1958.712932][ T7440] raw_sendmsg+0xa2e/0xc20 [ 1958.717443][ T7440] inet_sendmsg+0x5f/0x80 [ 1958.721783][ T7440] __sys_sendto+0x2a8/0x370 [ 1958.726286][ T7440] ? __cond_resched+0x11/0x40 [ 1958.731101][ T7440] ? fput+0x2d/0x130 [ 1958.735230][ T7440] __x64_sys_sendto+0x74/0x90 [ 1958.739977][ T7440] do_syscall_64+0x3d/0x90 [ 1958.744391][ T7440] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1958.747252][ C0] sd 0:0:1:0: [sg0] tag#561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1958.750280][ T7440] RIP: 0033:0x4665e9 [ 1958.750296][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.760545][ C0] sd 0:0:1:0: [sg0] tag#561 CDB: opcode=0xe5 (vendor) [ 1958.764379][ T7440] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 [ 1958.784014][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1958.790704][ T7440] ORIG_RAX: 000000000000002c [ 1958.790716][ T7440] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1958.790730][ T7440] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1958.796791][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1958.806275][ T7440] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1958.810958][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[20]: ba [ 1958.818880][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 11:15:27 executing program 3 (fault-call:14 fault-nth:14): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1958.818894][ T7440] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1958.928082][ T7513] FAULT_INJECTION: forcing a failure. [ 1958.928082][ T7513] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.940707][ T7513] CPU: 1 PID: 7513 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1958.950768][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.960903][ T7513] Call Trace: [ 1958.964171][ T7513] dump_stack_lvl+0xb7/0x103 [ 1958.968792][ T7513] dump_stack+0x11/0x1a [ 1958.973235][ T7513] should_fail+0x23c/0x250 11:15:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x802d0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:27 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xf, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:27 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2f, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:27 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0701a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00"/656], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) [ 1958.977653][ T7513] __should_failslab+0x81/0x90 [ 1958.982409][ T7513] should_failslab+0x5/0x20 [ 1958.987333][ T7513] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1958.993055][ T7513] ? __kmalloc_node_track_caller+0x30/0x40 [ 1958.998988][ T7513] __kmalloc_node_track_caller+0x30/0x40 [ 1959.004631][ T7513] ? __ip_append_data+0x13cd/0x1dc0 [ 1959.009896][ T7513] __alloc_skb+0x187/0x420 [ 1959.014374][ T7513] __ip_append_data+0x13cd/0x1dc0 [ 1959.019404][ T7513] ? raw_send_hdrinc+0xa60/0xa60 [ 1959.024336][ T7513] ? raw_send_hdrinc+0xa60/0xa60 [ 1959.029269][ T7513] ip_append_data+0x126/0x150 [ 1959.034048][ T7513] raw_sendmsg+0xa2e/0xc20 [ 1959.038801][ T7513] inet_sendmsg+0x5f/0x80 [ 1959.043135][ T7513] __sys_sendto+0x2a8/0x370 [ 1959.047644][ T7513] ? __cond_resched+0x11/0x40 [ 1959.052447][ T7513] ? fput+0x2d/0x130 [ 1959.056364][ T7513] __x64_sys_sendto+0x74/0x90 [ 1959.061050][ T7513] do_syscall_64+0x3d/0x90 [ 1959.065581][ T7513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1959.071471][ T7513] RIP: 0033:0x4665e9 [ 1959.075386][ T7513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1959.095833][ T7513] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1959.104274][ T7513] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1959.112420][ T7513] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1959.120562][ T7513] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1959.128532][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1959.136508][ T7513] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:28 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x10, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:28 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0f01a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:28 executing program 3 (fault-call:14 fault-nth:15): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1959.191891][ C0] sd 0:0:1:0: [sg0] tag#562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1959.202451][ C0] sd 0:0:1:0: [sg0] tag#562 CDB: opcode=0xe5 (vendor) [ 1959.209280][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1959.218761][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1959.228435][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[20]: ba [ 1959.335848][ T7540] FAULT_INJECTION: forcing a failure. [ 1959.335848][ T7540] name failslab, interval 1, probability 0, space 0, times 0 [ 1959.349442][ T7540] CPU: 1 PID: 7540 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1959.359572][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1959.369916][ T7540] Call Trace: [ 1959.373188][ T7540] dump_stack_lvl+0xb7/0x103 [ 1959.377864][ T7540] dump_stack+0x11/0x1a [ 1959.382007][ T7540] should_fail+0x23c/0x250 [ 1959.386859][ T7540] __should_failslab+0x81/0x90 [ 1959.391912][ T7540] should_failslab+0x5/0x20 [ 1959.396456][ T7540] kmem_cache_alloc_node+0x58/0x2b0 [ 1959.401888][ T7540] ? ip_generic_getfrag+0x14a/0x1b0 [ 1959.407091][ T7540] ? __alloc_skb+0xed/0x420 [ 1959.411600][ T7540] __alloc_skb+0xed/0x420 [ 1959.416118][ T7540] __ip_append_data+0x13cd/0x1dc0 [ 1959.421143][ T7540] ? raw_send_hdrinc+0xa60/0xa60 [ 1959.426083][ T7540] ? raw_send_hdrinc+0xa60/0xa60 [ 1959.431056][ T7540] ip_append_data+0x126/0x150 [ 1959.435742][ T7540] raw_sendmsg+0xa2e/0xc20 [ 1959.440251][ T7540] inet_sendmsg+0x5f/0x80 [ 1959.444786][ T7540] __sys_sendto+0x2a8/0x370 [ 1959.449557][ T7540] ? __cond_resched+0x11/0x40 [ 1959.454245][ T7540] ? fput+0x2d/0x130 [ 1959.458247][ T7540] __x64_sys_sendto+0x74/0x90 [ 1959.463001][ T7540] do_syscall_64+0x3d/0x90 [ 1959.467511][ T7540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1959.473411][ T7540] RIP: 0033:0x4665e9 [ 1959.477793][ T7540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1959.497661][ T7540] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1959.506251][ T7540] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1959.514245][ T7540] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1959.522208][ T7540] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1959.530190][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1959.538163][ T7540] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:28 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x30, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:28 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x11, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, r0) 11:15:28 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0202a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1959.730818][ C0] sd 0:0:1:0: [sg0] tag#565 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1959.741246][ C0] sd 0:0:1:0: [sg0] tag#565 CDB: opcode=0xe5 (vendor) [ 1959.748036][ C0] sd 0:0:1:0: [sg0] tag#565 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1959.757510][ C0] sd 0:0:1:0: [sg0] tag#565 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1959.766990][ C0] sd 0:0:1:0: [sg0] tag#565 CDB[20]: ba 11:15:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x80880000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:28 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x31, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, r0) 11:15:28 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x12, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:28 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0203a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:28 executing program 3 (fault-call:14 fault-nth:16): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1959.942732][ C0] sd 0:0:1:0: [sg0] tag#567 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1959.953023][ C0] sd 0:0:1:0: [sg0] tag#567 CDB: opcode=0xe5 (vendor) [ 1959.959853][ C0] sd 0:0:1:0: [sg0] tag#567 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1959.967717][ T7608] FAULT_INJECTION: forcing a failure. [ 1959.967717][ T7608] name failslab, interval 1, probability 0, space 0, times 0 [ 1959.969333][ C0] sd 0:0:1:0: [sg0] tag#567 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 11:15:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, r0) [ 1959.982103][ T7608] CPU: 1 PID: 7608 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1959.991550][ C0] sd 0:0:1:0: [sg0] tag#567 CDB[20]: ba [ 1960.001558][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1960.001570][ T7608] Call Trace: [ 1960.001577][ T7608] dump_stack_lvl+0xb7/0x103 [ 1960.025064][ T7608] dump_stack+0x11/0x1a [ 1960.029229][ T7608] should_fail+0x23c/0x250 [ 1960.033648][ T7608] __should_failslab+0x81/0x90 [ 1960.038407][ T7608] should_failslab+0x5/0x20 [ 1960.042982][ T7608] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1960.048704][ T7608] ? __kmalloc_node_track_caller+0x30/0x40 [ 1960.054511][ T7608] __kmalloc_node_track_caller+0x30/0x40 [ 1960.060140][ T7608] ? __ip_append_data+0x13cd/0x1dc0 [ 1960.065331][ T7608] __alloc_skb+0x187/0x420 [ 1960.069798][ T7608] __ip_append_data+0x13cd/0x1dc0 [ 1960.074824][ T7608] ? raw_send_hdrinc+0xa60/0xa60 [ 1960.079767][ T7608] ? raw_send_hdrinc+0xa60/0xa60 [ 1960.084899][ T7608] ip_append_data+0x126/0x150 [ 1960.089576][ T7608] raw_sendmsg+0xa2e/0xc20 [ 1960.093994][ T7608] inet_sendmsg+0x5f/0x80 [ 1960.098322][ T7608] __sys_sendto+0x2a8/0x370 [ 1960.102820][ T7608] ? __cond_resched+0x11/0x40 [ 1960.107503][ T7608] ? fput+0x2d/0x130 [ 1960.111425][ T7608] __x64_sys_sendto+0x74/0x90 [ 1960.116099][ T7608] do_syscall_64+0x3d/0x90 [ 1960.120510][ T7608] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1960.126603][ T7608] RIP: 0033:0x4665e9 [ 1960.130505][ T7608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1960.150110][ T7608] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1960.158520][ T7608] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1960.166481][ T7608] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1960.174694][ T7608] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1960.182650][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1960.190606][ T7608] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:28 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x32, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:28 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x13, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:28 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0206a6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:29 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x14, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) [ 1960.589846][ C0] sd 0:0:1:0: [sg0] tag#568 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1960.600136][ C0] sd 0:0:1:0: [sg0] tag#568 CDB: opcode=0xe5 (vendor) [ 1960.606900][ C0] sd 0:0:1:0: [sg0] tag#568 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1960.616353][ C0] sd 0:0:1:0: [sg0] tag#568 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1960.625810][ C0] sd 0:0:1:0: [sg0] tag#568 CDB[20]: ba [ 1960.781948][ T7669] FAULT_INJECTION: forcing a failure. [ 1960.781948][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 1960.794757][ T7669] CPU: 1 PID: 7669 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1960.804819][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1960.814872][ T7669] Call Trace: [ 1960.818144][ T7669] dump_stack_lvl+0xb7/0x103 [ 1960.822754][ T7669] dump_stack+0x11/0x1a [ 1960.826916][ T7669] should_fail+0x23c/0x250 11:15:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x80e30000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:29 executing program 3 (fault-call:14 fault-nth:17): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:29 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="020ea6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:15:29 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x36, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:29 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x15, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1960.831531][ T7669] __should_failslab+0x81/0x90 [ 1960.836292][ T7669] should_failslab+0x5/0x20 [ 1960.840814][ T7669] kmem_cache_alloc_node+0x58/0x2b0 [ 1960.846409][ T7669] ? ip_generic_getfrag+0x14a/0x1b0 [ 1960.851608][ T7669] ? __alloc_skb+0xed/0x420 [ 1960.856126][ T7669] __alloc_skb+0xed/0x420 [ 1960.858613][ C0] sd 0:0:1:0: [sg0] tag#569 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1960.860478][ T7669] __ip_append_data+0x13cd/0x1dc0 [ 1960.860499][ T7669] ? raw_send_hdrinc+0xa60/0xa60 [ 1960.870750][ C0] sd 0:0:1:0: [sg0] tag#569 CDB: opcode=0xe5 (vendor) [ 1960.875741][ T7669] ? raw_send_hdrinc+0xa60/0xa60 [ 1960.880686][ C0] sd 0:0:1:0: [sg0] tag#569 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1960.887383][ T7669] ip_append_data+0x126/0x150 [ 1960.892324][ C0] sd 0:0:1:0: [sg0] tag#569 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1960.892341][ C0] sd 0:0:1:0: [sg0] tag#569 CDB[20]: ba [ 1960.901848][ T7669] raw_sendmsg+0xa2e/0xc20 [ 1960.901879][ T7669] inet_sendmsg+0x5f/0x80 [ 1960.930306][ T7669] __sys_sendto+0x2a8/0x370 [ 1960.934816][ T7669] ? __cond_resched+0x11/0x40 [ 1960.939537][ T7669] ? fput+0x2d/0x130 [ 1960.943442][ T7669] __x64_sys_sendto+0x74/0x90 [ 1960.948372][ T7669] do_syscall_64+0x3d/0x90 [ 1960.952862][ T7669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1960.958831][ T7669] RIP: 0033:0x4665e9 [ 1960.962705][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1960.982592][ T7669] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1960.991608][ T7669] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1960.999564][ T7669] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1961.007604][ T7669] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1961.015597][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1961.023666][ T7669] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 11:15:30 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x60, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:30 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x16, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:30 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="020fa6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:30 executing program 3 (fault-call:14 fault-nth:18): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1961.552997][ T7690] FAULT_INJECTION: forcing a failure. [ 1961.552997][ T7690] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.565864][ T7690] CPU: 1 PID: 7690 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1961.575940][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.586079][ T7690] Call Trace: [ 1961.589358][ T7690] dump_stack_lvl+0xb7/0x103 [ 1961.593974][ T7690] dump_stack+0x11/0x1a [ 1961.598123][ T7690] should_fail+0x23c/0x250 [ 1961.602538][ T7690] __should_failslab+0x81/0x90 [ 1961.607381][ T7690] should_failslab+0x5/0x20 [ 1961.612002][ T7690] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1961.614612][ C0] sd 0:0:1:0: [sg0] tag#570 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1961.617753][ T7690] ? __kmalloc_node_track_caller+0x30/0x40 [ 1961.628127][ C0] sd 0:0:1:0: [sg0] tag#570 CDB: opcode=0xe5 (vendor) [ 1961.634037][ T7690] __kmalloc_node_track_caller+0x30/0x40 [ 1961.640820][ C0] sd 0:0:1:0: [sg0] tag#570 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1961.646825][ T7690] ? __ip_append_data+0x13cd/0x1dc0 [ 1961.646844][ T7690] __alloc_skb+0x187/0x420 [ 1961.656401][ C0] sd 0:0:1:0: [sg0] tag#570 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1961.661835][ T7690] __ip_append_data+0x13cd/0x1dc0 [ 1961.666235][ C0] sd 0:0:1:0: [sg0] tag#570 CDB[20]: ba [ 1961.675735][ T7690] ? raw_send_hdrinc+0xa60/0xa60 [ 1961.691288][ T7690] ? raw_send_hdrinc+0xa60/0xa60 [ 1961.696320][ T7690] ip_append_data+0x126/0x150 [ 1961.701200][ T7690] raw_sendmsg+0xa2e/0xc20 [ 1961.705713][ T7690] inet_sendmsg+0x5f/0x80 [ 1961.710100][ T7690] __sys_sendto+0x2a8/0x370 [ 1961.714786][ T7690] ? __cond_resched+0x11/0x40 [ 1961.719486][ T7690] ? fput+0x2d/0x130 [ 1961.723424][ T7690] __x64_sys_sendto+0x74/0x90 [ 1961.728166][ T7690] do_syscall_64+0x3d/0x90 [ 1961.732704][ T7690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1961.738601][ T7690] RIP: 0033:0x4665e9 [ 1961.742566][ T7690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.762536][ T7690] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1961.770953][ T7690] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1961.778936][ T7690] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1961.787053][ T7690] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1961.795106][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1961.803167][ T7690] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) [ 1962.037724][ T7733] FAULT_INJECTION: forcing a failure. [ 1962.037724][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.050518][ T7733] CPU: 1 PID: 7733 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1962.060704][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.070833][ T7733] Call Trace: [ 1962.074108][ T7733] dump_stack_lvl+0xb7/0x103 [ 1962.078749][ T7733] dump_stack+0x11/0x1a [ 1962.082919][ T7733] should_fail+0x23c/0x250 11:15:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:30 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:30 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x17, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:30 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="021ba6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:30 executing program 3 (fault-call:14 fault-nth:19): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) [ 1962.087419][ T7733] __should_failslab+0x81/0x90 [ 1962.092178][ T7733] should_failslab+0x5/0x20 [ 1962.096679][ T7733] kmem_cache_alloc_node+0x58/0x2b0 [ 1962.101903][ T7733] ? ip_generic_getfrag+0x14a/0x1b0 [ 1962.107103][ T7733] ? __alloc_skb+0xed/0x420 [ 1962.111758][ T7733] __alloc_skb+0xed/0x420 [ 1962.116093][ T7733] __ip_append_data+0x13cd/0x1dc0 [ 1962.120071][ C0] sd 0:0:1:0: [sg0] tag#571 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1962.121110][ T7733] ? raw_send_hdrinc+0xa60/0xa60 [ 1962.131388][ C0] sd 0:0:1:0: [sg0] tag#571 CDB: opcode=0xe5 (vendor) [ 1962.136267][ T7733] ? raw_send_hdrinc+0xa60/0xa60 [ 1962.143046][ C0] sd 0:0:1:0: [sg0] tag#571 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1962.147936][ T7733] ip_append_data+0x126/0x150 [ 1962.157447][ C0] sd 0:0:1:0: [sg0] tag#571 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1962.162078][ T7733] raw_sendmsg+0xa2e/0xc20 [ 1962.171617][ C0] sd 0:0:1:0: [sg0] tag#571 CDB[20]: ba [ 1962.175987][ T7733] inet_sendmsg+0x5f/0x80 [ 1962.185811][ T7733] __sys_sendto+0x2a8/0x370 [ 1962.190329][ T7733] ? __cond_resched+0x11/0x40 [ 1962.195011][ T7733] ? fput+0x2d/0x130 [ 1962.198957][ T7733] __x64_sys_sendto+0x74/0x90 [ 1962.203647][ T7733] do_syscall_64+0x3d/0x90 [ 1962.208137][ T7733] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1962.214078][ T7733] RIP: 0033:0x4665e9 [ 1962.218161][ T7733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1962.237899][ T7733] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1962.246311][ T7733] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1962.254280][ T7733] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1962.262384][ T7733] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1962.270400][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1962.278372][ T7733] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:31 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x4, 0x0, @multicast2}}}, 0x88) 11:15:31 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x18, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:31 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="02fea6ffffff0a0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:31 executing program 3 (fault-call:14 fault-nth:20): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:31 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) 11:15:31 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1962.654770][ C0] sd 0:0:1:0: [sg0] tag#572 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1962.665109][ C0] sd 0:0:1:0: [sg0] tag#572 CDB: opcode=0xe5 (vendor) [ 1962.672004][ C0] sd 0:0:1:0: [sg0] tag#572 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1962.681490][ C0] sd 0:0:1:0: [sg0] tag#572 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1962.691029][ C0] sd 0:0:1:0: [sg0] tag#572 CDB[20]: ba [ 1962.700687][ T7788] FAULT_INJECTION: forcing a failure. [ 1962.700687][ T7788] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.713408][ T7788] CPU: 1 PID: 7788 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1962.723642][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.733755][ T7788] Call Trace: [ 1962.737136][ T7788] dump_stack_lvl+0xb7/0x103 [ 1962.741725][ T7788] dump_stack+0x11/0x1a [ 1962.745875][ T7788] should_fail+0x23c/0x250 [ 1962.750294][ T7788] __should_failslab+0x81/0x90 [ 1962.755042][ T7788] should_failslab+0x5/0x20 [ 1962.759533][ T7788] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1962.765329][ T7788] ? __kmalloc_node_track_caller+0x30/0x40 [ 1962.771124][ T7788] __kmalloc_node_track_caller+0x30/0x40 [ 1962.776771][ T7788] ? __ip_append_data+0x13cd/0x1dc0 [ 1962.781953][ T7788] __alloc_skb+0x187/0x420 [ 1962.786365][ T7788] __ip_append_data+0x13cd/0x1dc0 [ 1962.791445][ T7788] ? raw_send_hdrinc+0xa60/0xa60 [ 1962.796382][ T7788] ? raw_send_hdrinc+0xa60/0xa60 [ 1962.801355][ T7788] ip_append_data+0x126/0x150 [ 1962.806022][ T7788] raw_sendmsg+0xa2e/0xc20 [ 1962.810478][ T7788] inet_sendmsg+0x5f/0x80 [ 1962.814796][ T7788] __sys_sendto+0x2a8/0x370 [ 1962.819287][ T7788] ? __cond_resched+0x11/0x40 [ 1962.823961][ T7788] ? fput+0x2d/0x130 [ 1962.827882][ T7788] __x64_sys_sendto+0x74/0x90 [ 1962.832547][ T7788] do_syscall_64+0x3d/0x90 [ 1962.836948][ T7788] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1962.842830][ T7788] RIP: 0033:0x4665e9 [ 1962.846719][ T7788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1962.866324][ T7788] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1962.874721][ T7788] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1962.882685][ T7788] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1962.890651][ T7788] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1962.898622][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1962.906620][ T7788] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x90990000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:32 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x19, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:32 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x2, @multicast2}}}, 0x88) 11:15:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) 11:15:32 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff080100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:32 executing program 3 (fault-call:14 fault-nth:21): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1963.406978][ T7799] FAULT_INJECTION: forcing a failure. [ 1963.406978][ T7799] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.419615][ T7799] CPU: 1 PID: 7799 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1963.429703][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1963.440012][ T7799] Call Trace: [ 1963.443287][ T7799] dump_stack_lvl+0xb7/0x103 [ 1963.447875][ T7799] dump_stack+0x11/0x1a [ 1963.452024][ T7799] should_fail+0x23c/0x250 [ 1963.456458][ T7799] __should_failslab+0x81/0x90 [ 1963.461219][ T7799] should_failslab+0x5/0x20 [ 1963.465712][ T7799] kmem_cache_alloc_node+0x58/0x2b0 [ 1963.470926][ T7799] ? ip_generic_getfrag+0x14a/0x1b0 [ 1963.476130][ T7799] ? __alloc_skb+0xed/0x420 [ 1963.480637][ T7799] __alloc_skb+0xed/0x420 [ 1963.484968][ T7799] __ip_append_data+0x13cd/0x1dc0 [ 1963.490004][ T7799] ? raw_send_hdrinc+0xa60/0xa60 [ 1963.495017][ T7799] ? raw_send_hdrinc+0xa60/0xa60 [ 1963.499977][ T7799] ip_append_data+0x126/0x150 [ 1963.504668][ T7799] raw_sendmsg+0xa2e/0xc20 [ 1963.509100][ T7799] inet_sendmsg+0x5f/0x80 [ 1963.513426][ T7799] __sys_sendto+0x2a8/0x370 [ 1963.517922][ T7799] ? __cond_resched+0x11/0x40 [ 1963.522597][ T7799] ? fput+0x2d/0x130 [ 1963.526485][ T7799] __x64_sys_sendto+0x74/0x90 [ 1963.531215][ T7799] do_syscall_64+0x3d/0x90 [ 1963.535668][ T7799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1963.541564][ T7799] RIP: 0033:0x4665e9 [ 1963.542139][ C0] sd 0:0:1:0: [sg0] tag#573 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1963.545450][ T7799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.545470][ T7799] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 [ 1963.555715][ C0] sd 0:0:1:0: [sg0] tag#573 CDB: opcode=0xe5 (vendor) [ 1963.575266][ T7799] ORIG_RAX: 000000000000002c [ 1963.575276][ T7799] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1963.575287][ T7799] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1963.575299][ T7799] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1963.575312][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1963.581361][ C0] sd 0:0:1:0: [sg0] tag#573 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1963.588095][ T7799] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1963.642238][ C0] sd 0:0:1:0: [sg0] tag#573 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1963.651821][ C0] sd 0:0:1:0: [sg0] tag#573 CDB[20]: ba 11:15:32 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x6, @multicast2}}}, 0x88) 11:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:32 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6fffffffa0100000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:32 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x1a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:32 executing program 3 (fault-call:14 fault-nth:22): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:32 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x14, @multicast2}}}, 0x88) [ 1963.963125][ T7842] FAULT_INJECTION: forcing a failure. [ 1963.963125][ T7842] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.975769][ T7842] CPU: 1 PID: 7842 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1963.985838][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1963.995948][ T7842] Call Trace: [ 1963.999214][ T7842] dump_stack_lvl+0xb7/0x103 [ 1964.003791][ T7842] dump_stack+0x11/0x1a [ 1964.007928][ T7842] should_fail+0x23c/0x250 [ 1964.012369][ T7842] __should_failslab+0x81/0x90 [ 1964.017127][ T7842] should_failslab+0x5/0x20 [ 1964.021614][ T7842] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1964.027325][ T7842] ? __kmalloc_node_track_caller+0x30/0x40 [ 1964.033127][ T7842] __kmalloc_node_track_caller+0x30/0x40 [ 1964.038758][ T7842] ? __ip_append_data+0x13cd/0x1dc0 [ 1964.043943][ T7842] __alloc_skb+0x187/0x420 [ 1964.048576][ T7842] __ip_append_data+0x13cd/0x1dc0 [ 1964.053591][ T7842] ? raw_send_hdrinc+0xa60/0xa60 [ 1964.058523][ T7842] ? raw_send_hdrinc+0xa60/0xa60 [ 1964.063506][ T7842] ip_append_data+0x126/0x150 [ 1964.068242][ T7842] raw_sendmsg+0xa2e/0xc20 [ 1964.072665][ T7842] inet_sendmsg+0x5f/0x80 [ 1964.077012][ T7842] __sys_sendto+0x2a8/0x370 [ 1964.081617][ T7842] ? __cond_resched+0x11/0x40 [ 1964.086358][ T7842] ? fput+0x2d/0x130 [ 1964.090246][ T7842] __x64_sys_sendto+0x74/0x90 [ 1964.095007][ T7842] do_syscall_64+0x3d/0x90 [ 1964.099473][ T7842] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1964.105401][ T7842] RIP: 0033:0x4665e9 [ 1964.109291][ T7842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.128897][ T7842] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1964.137383][ T7842] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1964.145410][ T7842] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1964.153364][ T7842] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1964.161321][ T7842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1964.169348][ T7842] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1964.521595][ C0] sd 0:0:1:0: [sg0] tag#574 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1964.531854][ C0] sd 0:0:1:0: [sg0] tag#574 CDB: opcode=0xe5 (vendor) [ 1964.538739][ C0] sd 0:0:1:0: [sg0] tag#574 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1964.548219][ C0] sd 0:0:1:0: [sg0] tag#574 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1964.557715][ C0] sd 0:0:1:0: [sg0] tag#574 CDB[20]: ba [ 1964.563294][ C0] sd 0:0:1:0: [sg0] tag#575 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1964.573531][ C0] sd 0:0:1:0: [sg0] tag#575 CDB: opcode=0xe5 (vendor) [ 1964.580325][ C0] sd 0:0:1:0: [sg0] tag#575 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1964.589799][ C0] sd 0:0:1:0: [sg0] tag#575 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1964.599552][ C0] sd 0:0:1:0: [sg0] tag#575 CDB[20]: ba 11:15:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x90f40000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:34 executing program 3 (fault-call:14 fault-nth:23): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:34 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x21, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:34 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0200000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:34 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x29, @multicast2}}}, 0x88) [ 1965.231289][ C0] sd 0:0:1:0: [sg0] tag#530 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1965.241674][ C0] sd 0:0:1:0: [sg0] tag#530 CDB: opcode=0xe5 (vendor) [ 1965.248691][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1965.258516][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1965.267977][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[20]: ba 11:15:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:34 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x600, @multicast2}}}, 0x88) [ 1965.327525][ T7885] FAULT_INJECTION: forcing a failure. [ 1965.327525][ T7885] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.340322][ T7885] CPU: 1 PID: 7885 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1965.350381][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.360517][ T7885] Call Trace: [ 1965.363848][ T7885] dump_stack_lvl+0xb7/0x103 [ 1965.368531][ T7885] dump_stack+0x11/0x1a [ 1965.372681][ T7885] should_fail+0x23c/0x250 [ 1965.377111][ T7885] __should_failslab+0x81/0x90 [ 1965.381919][ T7885] should_failslab+0x5/0x20 [ 1965.386420][ T7885] kmem_cache_alloc_node+0x58/0x2b0 [ 1965.391640][ T7885] ? ip_generic_getfrag+0x14a/0x1b0 [ 1965.396923][ T7885] ? __alloc_skb+0xed/0x420 [ 1965.401418][ T7885] __alloc_skb+0xed/0x420 [ 1965.405736][ T7885] __ip_append_data+0x13cd/0x1dc0 [ 1965.410743][ T7885] ? raw_send_hdrinc+0xa60/0xa60 [ 1965.415698][ T7885] ? raw_send_hdrinc+0xa60/0xa60 [ 1965.420623][ T7885] ip_append_data+0x126/0x150 [ 1965.425286][ T7885] raw_sendmsg+0xa2e/0xc20 [ 1965.429773][ T7885] inet_sendmsg+0x5f/0x80 [ 1965.434173][ T7885] __sys_sendto+0x2a8/0x370 [ 1965.438665][ T7885] ? __cond_resched+0x11/0x40 [ 1965.443362][ T7885] ? fput+0x2d/0x130 [ 1965.447292][ T7885] __x64_sys_sendto+0x74/0x90 [ 1965.451957][ T7885] do_syscall_64+0x3d/0x90 [ 1965.456359][ T7885] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1965.462238][ T7885] RIP: 0033:0x4665e9 [ 1965.466113][ T7885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.485712][ T7885] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1965.494120][ T7885] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1965.502074][ T7885] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1965.510129][ T7885] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1965.518082][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1965.526035][ T7885] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1965.625203][ C0] sd 0:0:1:0: [sg0] tag#531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1965.635475][ C0] sd 0:0:1:0: [sg0] tag#531 CDB: opcode=0xe5 (vendor) [ 1965.642241][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1965.651712][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1965.661190][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[20]: ba 11:15:34 executing program 3 (fault-call:14 fault-nth:24): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:34 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x1400, @multicast2}}}, 0x88) 11:15:34 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x22, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:34 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0300000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1966.111302][ T7930] FAULT_INJECTION: forcing a failure. [ 1966.111302][ T7930] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.120968][ C0] sd 0:0:1:0: [sg0] tag#532 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1966.124016][ T7930] CPU: 1 PID: 7930 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1966.134245][ C0] sd 0:0:1:0: [sg0] tag#532 CDB: opcode=0xe5 (vendor) [ 1966.144428][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.144443][ T7930] Call Trace: [ 1966.144450][ T7930] dump_stack_lvl+0xb7/0x103 [ 1966.144474][ T7930] dump_stack+0x11/0x1a [ 1966.151234][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1966.161251][ T7930] should_fail+0x23c/0x250 [ 1966.161279][ T7930] __should_failslab+0x81/0x90 [ 1966.164566][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1966.169117][ T7930] should_failslab+0x5/0x20 [ 1966.169138][ T7930] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1966.173283][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[20]: ba [ 1966.182691][ T7930] ? __kmalloc_node_track_caller+0x30/0x40 [ 1966.223084][ T7930] __kmalloc_node_track_caller+0x30/0x40 [ 1966.228734][ T7930] ? __ip_append_data+0x13cd/0x1dc0 [ 1966.233932][ T7930] __alloc_skb+0x187/0x420 [ 1966.238391][ T7930] __ip_append_data+0x13cd/0x1dc0 [ 1966.243408][ T7930] ? raw_send_hdrinc+0xa60/0xa60 [ 1966.248419][ T7930] ? raw_send_hdrinc+0xa60/0xa60 [ 1966.253381][ T7930] ip_append_data+0x126/0x150 [ 1966.258080][ T7930] raw_sendmsg+0xa2e/0xc20 [ 1966.262529][ T7930] inet_sendmsg+0x5f/0x80 [ 1966.266859][ T7930] __sys_sendto+0x2a8/0x370 [ 1966.271378][ T7930] ? __cond_resched+0x11/0x40 [ 1966.276121][ T7930] ? fput+0x2d/0x130 [ 1966.280082][ T7930] __x64_sys_sendto+0x74/0x90 [ 1966.284759][ T7930] do_syscall_64+0x3d/0x90 [ 1966.289177][ T7930] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1966.295136][ T7930] RIP: 0033:0x4665e9 [ 1966.299024][ T7930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.318967][ T7930] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1966.327423][ T7930] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1966.335465][ T7930] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1966.343442][ T7930] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1966.351447][ T7930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1966.359419][ T7930] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:35 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x2900, @multicast2}}}, 0x88) 11:15:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x97ffffff}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:35 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0600000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:35 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x23, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:35 executing program 3 (fault-call:14 fault-nth:25): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:35 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2=0xe0000001}}}, 0x88) [ 1966.708808][ T7976] FAULT_INJECTION: forcing a failure. [ 1966.708808][ T7976] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.716537][ C0] sd 0:0:1:0: [sg0] tag#533 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1966.721665][ T7976] CPU: 1 PID: 7976 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1966.731882][ C0] sd 0:0:1:0: [sg0] tag#533 CDB: opcode=0xe5 (vendor) [ 1966.741900][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.741911][ T7976] Call Trace: [ 1966.741918][ T7976] dump_stack_lvl+0xb7/0x103 [ 1966.748686][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1966.758790][ T7976] dump_stack+0x11/0x1a [ 1966.758808][ T7976] should_fail+0x23c/0x250 [ 1966.758831][ T7976] __should_failslab+0x81/0x90 [ 1966.762098][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1966.766651][ T7976] should_failslab+0x5/0x20 [ 1966.766671][ T7976] kmem_cache_alloc_node+0x58/0x2b0 [ 1966.776116][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[20]: ba [ 1966.814162][ T7976] ? ip_generic_getfrag+0x14a/0x1b0 [ 1966.819410][ T7976] ? __alloc_skb+0xed/0x420 [ 1966.823916][ T7976] __alloc_skb+0xed/0x420 [ 1966.828416][ T7976] __ip_append_data+0x13cd/0x1dc0 [ 1966.833473][ T7976] ? raw_send_hdrinc+0xa60/0xa60 [ 1966.838410][ T7976] ? raw_send_hdrinc+0xa60/0xa60 [ 1966.843382][ T7976] ip_append_data+0x126/0x150 [ 1966.848101][ T7976] raw_sendmsg+0xa2e/0xc20 [ 1966.852529][ T7976] inet_sendmsg+0x5f/0x80 [ 1966.856855][ T7976] __sys_sendto+0x2a8/0x370 [ 1966.861354][ T7976] ? __cond_resched+0x11/0x40 [ 1966.866028][ T7976] ? fput+0x2d/0x130 [ 1966.869921][ T7976] __x64_sys_sendto+0x74/0x90 [ 1966.874595][ T7976] do_syscall_64+0x3d/0x90 [ 1966.879026][ T7976] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1966.885455][ T7976] RIP: 0033:0x4665e9 [ 1966.889342][ T7976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.909054][ T7976] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1966.917744][ T7976] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1966.925796][ T7976] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1966.933937][ T7976] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1966.941895][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1966.949850][ T7976] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:36 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2=0xe0000004}}}, 0x88) 11:15:36 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x24, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:36 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0e00000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1967.112428][ C0] sd 0:0:1:0: [sg0] tag#534 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1967.122979][ C0] sd 0:0:1:0: [sg0] tag#534 CDB: opcode=0xe5 (vendor) [ 1967.129770][ C0] sd 0:0:1:0: [sg0] tag#534 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1967.139276][ C0] sd 0:0:1:0: [sg0] tag#534 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1967.148746][ C0] sd 0:0:1:0: [sg0] tag#534 CDB[20]: ba [ 1967.261938][ T8018] FAULT_INJECTION: forcing a failure. [ 1967.261938][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.274863][ T8018] CPU: 1 PID: 8018 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1967.284973][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.295112][ T8018] Call Trace: [ 1967.298389][ T8018] dump_stack_lvl+0xb7/0x103 [ 1967.302988][ T8018] dump_stack+0x11/0x1a [ 1967.303300][ C0] sd 0:0:1:0: [sg0] tag#535 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1967.307144][ T8018] should_fail+0x23c/0x250 [ 1967.307180][ T8018] __should_failslab+0x81/0x90 [ 1967.317427][ C0] sd 0:0:1:0: [sg0] tag#535 CDB: opcode=0xe5 (vendor) [ 1967.321783][ T8018] should_failslab+0x5/0x20 [ 1967.326552][ C0] sd 0:0:1:0: [sg0] tag#535 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1967.333249][ T8018] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1967.337748][ C0] sd 0:0:1:0: [sg0] tag#535 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1967.347147][ T8018] ? __kmalloc_node_track_caller+0x30/0x40 [ 1967.347175][ T8018] __kmalloc_node_track_caller+0x30/0x40 [ 1967.352874][ C0] sd 0:0:1:0: [sg0] tag#535 CDB[20]: ba [ 1967.362280][ T8018] ? __ip_append_data+0x13cd/0x1dc0 [ 1967.362301][ T8018] __alloc_skb+0x187/0x420 [ 1967.389257][ T8018] __ip_append_data+0x13cd/0x1dc0 [ 1967.394284][ T8018] ? raw_send_hdrinc+0xa60/0xa60 [ 1967.399518][ T8018] ? raw_send_hdrinc+0xa60/0xa60 [ 1967.404534][ T8018] ip_append_data+0x126/0x150 [ 1967.409241][ T8018] raw_sendmsg+0xa2e/0xc20 [ 1967.413666][ T8018] inet_sendmsg+0x5f/0x80 [ 1967.418508][ T8018] __sys_sendto+0x2a8/0x370 [ 1967.423041][ T8018] ? __cond_resched+0x11/0x40 [ 1967.427802][ T8018] ? fput+0x2d/0x130 [ 1967.431734][ T8018] __x64_sys_sendto+0x74/0x90 [ 1967.436502][ T8018] do_syscall_64+0x3d/0x90 [ 1967.440917][ T8018] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1967.446995][ T8018] RIP: 0033:0x4665e9 [ 1967.451142][ T8018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.471014][ T8018] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1967.479427][ T8018] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1967.487481][ T8018] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1967.495538][ T8018] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1967.503512][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 11:15:36 executing program 3 (fault-call:14 fault-nth:26): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:36 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x20000148) 11:15:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 1967.511512][ T8018] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xa04f0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:36 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x25, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:36 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0f00000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:36 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x7fff, 0x1}}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) 11:15:36 executing program 3 (fault-call:14 fault-nth:27): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1967.695849][ C0] sd 0:0:1:0: [sg0] tag#536 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1967.706292][ C0] sd 0:0:1:0: [sg0] tag#536 CDB: opcode=0xe5 (vendor) [ 1967.713293][ C0] sd 0:0:1:0: [sg0] tag#536 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1967.722965][ C0] sd 0:0:1:0: [sg0] tag#536 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1967.732674][ C0] sd 0:0:1:0: [sg0] tag#536 CDB[20]: ba [ 1967.875198][ T8057] FAULT_INJECTION: forcing a failure. [ 1967.875198][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.888024][ T8057] CPU: 1 PID: 8057 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1967.898277][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.908477][ T8057] Call Trace: [ 1967.911749][ T8057] dump_stack_lvl+0xb7/0x103 [ 1967.916334][ T8057] dump_stack+0x11/0x1a [ 1967.920635][ T8057] should_fail+0x23c/0x250 [ 1967.925139][ T8057] __should_failslab+0x81/0x90 [ 1967.929930][ T8057] should_failslab+0x5/0x20 [ 1967.934429][ T8057] kmem_cache_alloc_node+0x58/0x2b0 [ 1967.939674][ T8057] ? ip_generic_getfrag+0x14a/0x1b0 [ 1967.945184][ T8057] ? __alloc_skb+0xed/0x420 [ 1967.949870][ T8057] __alloc_skb+0xed/0x420 [ 1967.954257][ T8057] __ip_append_data+0x13cd/0x1dc0 [ 1967.959285][ T8057] ? raw_send_hdrinc+0xa60/0xa60 [ 1967.964235][ T8057] ? raw_send_hdrinc+0xa60/0xa60 [ 1967.969173][ T8057] ip_append_data+0x126/0x150 [ 1967.973895][ T8057] raw_sendmsg+0xa2e/0xc20 [ 1967.978343][ T8057] inet_sendmsg+0x5f/0x80 [ 1967.982961][ T8057] __sys_sendto+0x2a8/0x370 [ 1967.987495][ T8057] ? __cond_resched+0x11/0x40 [ 1967.992183][ T8057] ? fput+0x2d/0x130 [ 1967.996196][ T8057] __x64_sys_sendto+0x74/0x90 [ 1968.000980][ T8057] do_syscall_64+0x3d/0x90 [ 1968.005391][ T8057] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1968.011280][ T8057] RIP: 0033:0x4665e9 [ 1968.015162][ T8057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.034866][ T8057] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1968.043268][ T8057] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1968.051496][ T8057] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1968.059451][ T8057] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1968.067782][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1968.076021][ T8057] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:37 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x26, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:37 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) 11:15:37 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a1b00000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:37 executing program 3 (fault-call:14 fault-nth:28): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:37 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x15, 0x1c, 0x16f, &(0x7f0000000180)}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) syncfs(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1968.697342][ C0] scsi_io_completion_action: 3 callbacks suppressed [ 1968.697371][ C0] sd 0:0:1:0: [sg0] tag#541 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.714640][ C0] sd 0:0:1:0: [sg0] tag#541 CDB: opcode=0xe5 (vendor) [ 1968.721649][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.726309][ T8099] FAULT_INJECTION: forcing a failure. [ 1968.726309][ T8099] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.731132][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1968.744153][ T8099] CPU: 1 PID: 8099 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1968.753617][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[20]: ba [ 1968.763618][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.763630][ T8099] Call Trace: [ 1968.763638][ T8099] dump_stack_lvl+0xb7/0x103 [ 1968.787166][ T8099] dump_stack+0x11/0x1a [ 1968.791323][ T8099] should_fail+0x23c/0x250 [ 1968.795732][ T8099] __should_failslab+0x81/0x90 [ 1968.800478][ T8099] should_failslab+0x5/0x20 [ 1968.805042][ T8099] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1968.810793][ T8099] ? __kmalloc_node_track_caller+0x30/0x40 [ 1968.816631][ T8099] __kmalloc_node_track_caller+0x30/0x40 [ 1968.822358][ T8099] ? __ip_append_data+0x13cd/0x1dc0 [ 1968.827613][ T8099] __alloc_skb+0x187/0x420 [ 1968.832019][ T8099] __ip_append_data+0x13cd/0x1dc0 [ 1968.837027][ T8099] ? raw_send_hdrinc+0xa60/0xa60 [ 1968.842002][ T8099] ? raw_send_hdrinc+0xa60/0xa60 [ 1968.846988][ T8099] ip_append_data+0x126/0x150 [ 1968.851768][ T8099] raw_sendmsg+0xa2e/0xc20 [ 1968.856187][ T8099] inet_sendmsg+0x5f/0x80 [ 1968.860505][ T8099] __sys_sendto+0x2a8/0x370 [ 1968.865031][ T8099] ? __cond_resched+0x11/0x40 [ 1968.869780][ T8099] ? fput+0x2d/0x130 [ 1968.873930][ T8099] __x64_sys_sendto+0x74/0x90 [ 1968.878681][ T8099] do_syscall_64+0x3d/0x90 [ 1968.883116][ T8099] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1968.889003][ T8099] RIP: 0033:0x4665e9 [ 1968.892974][ T8099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.912658][ T8099] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1968.921234][ T8099] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1968.929206][ T8099] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1968.937365][ T8099] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1968.945438][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1968.953394][ T8099] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:15:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xa0aa0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:38 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x27, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:38 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0afe00000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:38 executing program 3 (fault-call:14 fault-nth:29): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) [ 1969.298922][ T8125] FAULT_INJECTION: forcing a failure. [ 1969.298922][ T8125] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.311562][ T8125] CPU: 1 PID: 8125 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1969.322177][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.332245][ T8125] Call Trace: [ 1969.335630][ T8125] dump_stack_lvl+0xb7/0x103 [ 1969.340489][ T8125] dump_stack+0x11/0x1a [ 1969.344357][ C0] sd 0:0:1:0: [sg0] tag#544 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1969.344711][ T8125] should_fail+0x23c/0x250 [ 1969.355083][ C0] sd 0:0:1:0: [sg0] tag#544 CDB: opcode=0xe5 (vendor) [ 1969.359424][ T8125] __should_failslab+0x81/0x90 [ 1969.366212][ C0] sd 0:0:1:0: [sg0] tag#544 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1969.370928][ T8125] should_failslab+0x5/0x20 [ 1969.380817][ C0] sd 0:0:1:0: [sg0] tag#544 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1969.385268][ T8125] kmem_cache_alloc_node+0x58/0x2b0 [ 1969.394831][ C0] sd 0:0:1:0: [sg0] tag#544 CDB[20]: ba [ 1969.399975][ T8125] ? ip_generic_getfrag+0x14a/0x1b0 [ 1969.411318][ T8125] ? __alloc_skb+0xed/0x420 [ 1969.416257][ T8125] __alloc_skb+0xed/0x420 [ 1969.420580][ T8125] __ip_append_data+0x13cd/0x1dc0 [ 1969.425689][ T8125] ? raw_send_hdrinc+0xa60/0xa60 [ 1969.430634][ T8125] ? raw_send_hdrinc+0xa60/0xa60 [ 1969.435731][ T8125] ip_append_data+0x126/0x150 [ 1969.440462][ T8125] raw_sendmsg+0xa2e/0xc20 [ 1969.444875][ T8125] inet_sendmsg+0x5f/0x80 [ 1969.449268][ T8125] __sys_sendto+0x2a8/0x370 [ 1969.453793][ T8125] ? __cond_resched+0x11/0x40 [ 1969.458908][ T8125] ? fput+0x2d/0x130 [ 1969.462805][ T8125] __x64_sys_sendto+0x74/0x90 [ 1969.467556][ T8125] do_syscall_64+0x3d/0x90 [ 1969.471974][ T8125] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1969.477872][ T8125] RIP: 0033:0x4665e9 [ 1969.481764][ T8125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.502404][ T8125] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1969.511038][ T8125] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1969.519212][ T8125] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1969.527446][ T8125] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1969.535514][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1969.543573][ T8125] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:38 executing program 3 (fault-call:14 fault-nth:30): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:38 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x28, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) fcntl$getflags(r7, 0x0) [ 1969.607323][ C0] sd 0:0:1:0: [sg0] tag#545 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1969.617610][ C0] sd 0:0:1:0: [sg0] tag#545 CDB: opcode=0xe5 (vendor) [ 1969.624367][ C0] sd 0:0:1:0: [sg0] tag#545 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1969.633851][ C0] sd 0:0:1:0: [sg0] tag#545 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1969.643329][ C0] sd 0:0:1:0: [sg0] tag#545 CDB[20]: ba [ 1969.661885][ T8138] FAULT_INJECTION: forcing a failure. [ 1969.661885][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.674882][ T8138] CPU: 1 PID: 8138 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1969.685011][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.695164][ T8138] Call Trace: [ 1969.698440][ T8138] dump_stack_lvl+0xb7/0x103 [ 1969.703035][ T8138] dump_stack+0x11/0x1a [ 1969.707381][ T8138] should_fail+0x23c/0x250 [ 1969.711799][ T8138] __should_failslab+0x81/0x90 [ 1969.716559][ T8138] should_failslab+0x5/0x20 [ 1969.721071][ T8138] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1969.726800][ T8138] ? __kmalloc_node_track_caller+0x30/0x40 [ 1969.732670][ T8138] __kmalloc_node_track_caller+0x30/0x40 [ 1969.738309][ T8138] ? __ip_append_data+0x13cd/0x1dc0 [ 1969.743501][ T8138] __alloc_skb+0x187/0x420 [ 1969.747917][ T8138] __ip_append_data+0x13cd/0x1dc0 [ 1969.752949][ T8138] ? raw_send_hdrinc+0xa60/0xa60 [ 1969.757905][ T8138] ? raw_send_hdrinc+0xa60/0xa60 [ 1969.762849][ T8138] ip_append_data+0x126/0x150 [ 1969.767564][ T8138] raw_sendmsg+0xa2e/0xc20 [ 1969.771983][ T8138] inet_sendmsg+0x5f/0x80 [ 1969.776459][ T8138] __sys_sendto+0x2a8/0x370 [ 1969.781034][ T8138] ? __cond_resched+0x11/0x40 [ 1969.785734][ T8138] ? fput+0x2d/0x130 [ 1969.789990][ T8138] __x64_sys_sendto+0x74/0x90 [ 1969.794672][ T8138] do_syscall_64+0x3d/0x90 [ 1969.799279][ T8138] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1969.805221][ T8138] RIP: 0033:0x4665e9 [ 1969.809173][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.828950][ T8138] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1969.837994][ T8138] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1969.846026][ T8138] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1969.854001][ T8138] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1969.862061][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1969.870121][ T8138] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1969.937469][ C0] sd 0:0:1:0: [sg0] tag#549 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1969.947800][ C0] sd 0:0:1:0: [sg0] tag#549 CDB: opcode=0xe5 (vendor) [ 1969.954562][ C0] sd 0:0:1:0: [sg0] tag#549 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1969.964048][ C0] sd 0:0:1:0: [sg0] tag#549 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1969.974221][ C0] sd 0:0:1:0: [sg0] tag#549 CDB[20]: ba [ 1969.979847][ C0] sd 0:0:1:0: [sg0] tag#550 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1969.990132][ C0] sd 0:0:1:0: [sg0] tag#550 CDB: opcode=0xe5 (vendor) [ 1969.997013][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1970.006775][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1970.016282][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[20]: ba 11:15:38 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0ab902000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:38 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x29, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:38 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0003000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:38 executing program 3 (fault-call:14 fault-nth:31): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1970.041903][ T8163] FAULT_INJECTION: forcing a failure. [ 1970.041903][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 1970.054900][ T8163] CPU: 1 PID: 8163 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1970.065620][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.075906][ T8163] Call Trace: [ 1970.079567][ T8163] dump_stack_lvl+0xb7/0x103 [ 1970.084250][ T8163] dump_stack+0x11/0x1a [ 1970.088722][ T8163] should_fail+0x23c/0x250 [ 1970.093311][ T8163] __should_failslab+0x81/0x90 [ 1970.098090][ T8163] should_failslab+0x5/0x20 [ 1970.102614][ T8163] kmem_cache_alloc_node+0x58/0x2b0 [ 1970.108076][ T8163] ? ip_generic_getfrag+0x14a/0x1b0 [ 1970.113935][ T8163] ? __alloc_skb+0xed/0x420 [ 1970.118548][ T8163] __alloc_skb+0xed/0x420 [ 1970.123123][ T8163] __ip_append_data+0x13cd/0x1dc0 [ 1970.128346][ T8163] ? raw_send_hdrinc+0xa60/0xa60 [ 1970.133663][ T8163] ? raw_send_hdrinc+0xa60/0xa60 [ 1970.138805][ T8163] ip_append_data+0x126/0x150 [ 1970.143480][ T8163] raw_sendmsg+0xa2e/0xc20 [ 1970.147994][ T8163] inet_sendmsg+0x5f/0x80 [ 1970.152422][ T8163] __sys_sendto+0x2a8/0x370 [ 1970.156940][ T8163] ? __cond_resched+0x11/0x40 [ 1970.161651][ T8163] ? fput+0x2d/0x130 [ 1970.165573][ T8163] __x64_sys_sendto+0x74/0x90 [ 1970.170341][ T8163] do_syscall_64+0x3d/0x90 [ 1970.174932][ T8163] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1970.180829][ T8163] RIP: 0033:0x4665e9 [ 1970.184713][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1970.204356][ T8163] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1970.212776][ T8163] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1970.220756][ T8163] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1970.228747][ T8163] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1970.236741][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1970.244707][ T8163] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:39 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0009000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:39 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2b, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:39 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xb0050000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) fcntl$getflags(r7, 0x0) 11:15:39 executing program 3 (fault-call:14 fault-nth:32): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:39 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2c, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:39 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0afeff000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1970.517279][ C0] sd 0:0:1:0: [sg0] tag#551 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1970.527572][ C0] sd 0:0:1:0: [sg0] tag#551 CDB: opcode=0xe5 (vendor) [ 1970.534323][ C0] sd 0:0:1:0: [sg0] tag#551 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1970.543823][ C0] sd 0:0:1:0: [sg0] tag#551 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1970.553349][ C0] sd 0:0:1:0: [sg0] tag#551 CDB[20]: ba [ 1970.572029][ T8197] FAULT_INJECTION: forcing a failure. [ 1970.572029][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 1970.584818][ T8197] CPU: 1 PID: 8197 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1970.594986][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.605070][ T8197] Call Trace: [ 1970.608338][ T8197] dump_stack_lvl+0xb7/0x103 [ 1970.613024][ T8197] dump_stack+0x11/0x1a [ 1970.617181][ T8197] should_fail+0x23c/0x250 [ 1970.621650][ T8197] __should_failslab+0x81/0x90 [ 1970.626419][ T8197] should_failslab+0x5/0x20 [ 1970.630921][ T8197] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1970.636642][ T8197] ? __kmalloc_node_track_caller+0x30/0x40 [ 1970.642473][ T8197] __kmalloc_node_track_caller+0x30/0x40 [ 1970.648190][ T8197] ? __ip_append_data+0x13cd/0x1dc0 [ 1970.653406][ T8197] __alloc_skb+0x187/0x420 [ 1970.657929][ T8197] __ip_append_data+0x13cd/0x1dc0 [ 1970.662970][ T8197] ? raw_send_hdrinc+0xa60/0xa60 [ 1970.667988][ T8197] ? raw_send_hdrinc+0xa60/0xa60 [ 1970.672915][ T8197] ip_append_data+0x126/0x150 [ 1970.677656][ T8197] raw_sendmsg+0xa2e/0xc20 [ 1970.682067][ T8197] inet_sendmsg+0x5f/0x80 [ 1970.686396][ T8197] __sys_sendto+0x2a8/0x370 [ 1970.690902][ T8197] ? __cond_resched+0x11/0x40 [ 1970.695589][ T8197] ? fput+0x2d/0x130 [ 1970.699484][ T8197] __x64_sys_sendto+0x74/0x90 [ 1970.704178][ T8197] do_syscall_64+0x3d/0x90 [ 1970.708622][ T8197] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1970.714515][ T8197] RIP: 0033:0x4665e9 [ 1970.718446][ T8197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1970.738126][ T8197] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1970.746538][ T8197] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1970.754510][ T8197] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1970.762504][ T8197] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 11:15:39 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1970.770480][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1970.778506][ T8197] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 [ 1970.898929][ C0] sd 0:0:1:0: [sg0] tag#571 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1970.909311][ C0] sd 0:0:1:0: [sg0] tag#571 CDB: opcode=0xe5 (vendor) [ 1970.916096][ C0] sd 0:0:1:0: [sg0] tag#571 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1970.925561][ C0] sd 0:0:1:0: [sg0] tag#571 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1970.935038][ C0] sd 0:0:1:0: [sg0] tag#571 CDB[20]: ba 11:15:40 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:40 executing program 3 (fault-call:14 fault-nth:33): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:40 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a2b041f0000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1971.206682][ C0] sd 0:0:1:0: [sg0] tag#572 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1971.217067][ C0] sd 0:0:1:0: [sg0] tag#572 CDB: opcode=0xe5 (vendor) [ 1971.223825][ C0] sd 0:0:1:0: [sg0] tag#572 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1971.233396][ C0] sd 0:0:1:0: [sg0] tag#572 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1971.242872][ C0] sd 0:0:1:0: [sg0] tag#572 CDB[20]: ba 11:15:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) fcntl$getflags(r7, 0x0) 11:15:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xb0600000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 1971.355448][ T8219] FAULT_INJECTION: forcing a failure. [ 1971.355448][ T8219] name failslab, interval 1, probability 0, space 0, times 0 [ 1971.368194][ T8219] CPU: 1 PID: 8219 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1971.378306][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1971.388383][ T8219] Call Trace: [ 1971.391665][ T8219] dump_stack_lvl+0xb7/0x103 [ 1971.396298][ T8219] dump_stack+0x11/0x1a [ 1971.400454][ T8219] should_fail+0x23c/0x250 [ 1971.404875][ T8219] __should_failslab+0x81/0x90 [ 1971.409630][ T8219] should_failslab+0x5/0x20 [ 1971.414127][ T8219] kmem_cache_alloc_node+0x58/0x2b0 [ 1971.419349][ T8219] ? ip_generic_getfrag+0x14a/0x1b0 [ 1971.424554][ T8219] ? __alloc_skb+0xed/0x420 [ 1971.429567][ T8219] __alloc_skb+0xed/0x420 [ 1971.434066][ T8219] __ip_append_data+0x13cd/0x1dc0 [ 1971.439259][ T8219] ? raw_send_hdrinc+0xa60/0xa60 [ 1971.444279][ T8219] ? raw_send_hdrinc+0xa60/0xa60 [ 1971.449223][ T8219] ip_append_data+0x126/0x150 [ 1971.453891][ T8219] raw_sendmsg+0xa2e/0xc20 [ 1971.458300][ T8219] inet_sendmsg+0x5f/0x80 [ 1971.462622][ T8219] __sys_sendto+0x2a8/0x370 [ 1971.467114][ T8219] ? __cond_resched+0x11/0x40 [ 1971.471821][ T8219] ? fput+0x2d/0x130 [ 1971.475702][ T8219] __x64_sys_sendto+0x74/0x90 [ 1971.480431][ T8219] do_syscall_64+0x3d/0x90 [ 1971.484831][ T8219] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1971.490978][ T8219] RIP: 0033:0x4665e9 [ 1971.494911][ T8219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1971.514678][ T8219] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1971.523077][ T8219] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1971.531047][ T8219] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1971.539260][ T8219] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1971.547218][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1971.555180][ T8219] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1971.588563][ C0] sd 0:0:1:0: [sg0] tag#573 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1971.598989][ C0] sd 0:0:1:0: [sg0] tag#573 CDB: opcode=0xe5 (vendor) [ 1971.605738][ C0] sd 0:0:1:0: [sg0] tag#573 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1971.615305][ C0] sd 0:0:1:0: [sg0] tag#573 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1971.624939][ C0] sd 0:0:1:0: [sg0] tag#573 CDB[20]: ba 11:15:41 executing program 3 (fault-call:14 fault-nth:34): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:41 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:41 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0afeffffff00000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1972.156546][ C0] sd 0:0:1:0: [sg0] tag#512 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1972.166839][ C0] sd 0:0:1:0: [sg0] tag#512 CDB: opcode=0xe5 (vendor) [ 1972.173598][ C0] sd 0:0:1:0: [sg0] tag#512 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1972.183087][ C0] sd 0:0:1:0: [sg0] tag#512 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1972.192562][ C0] sd 0:0:1:0: [sg0] tag#512 CDB[20]: ba [ 1972.202558][ T8238] FAULT_INJECTION: forcing a failure. [ 1972.202558][ T8238] name failslab, interval 1, probability 0, space 0, times 0 [ 1972.215355][ T8238] CPU: 1 PID: 8238 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1972.225430][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.235675][ T8238] Call Trace: [ 1972.238945][ T8238] dump_stack_lvl+0xb7/0x103 [ 1972.243536][ T8238] dump_stack+0x11/0x1a [ 1972.247841][ T8238] should_fail+0x23c/0x250 [ 1972.252275][ T8238] __should_failslab+0x81/0x90 [ 1972.257238][ T8238] should_failslab+0x5/0x20 [ 1972.261724][ T8238] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1972.267696][ T8238] ? __kmalloc_node_track_caller+0x30/0x40 [ 1972.273598][ T8238] __kmalloc_node_track_caller+0x30/0x40 [ 1972.279255][ T8238] ? __ip_append_data+0x13cd/0x1dc0 [ 1972.285301][ T8238] __alloc_skb+0x187/0x420 [ 1972.289711][ T8238] __ip_append_data+0x13cd/0x1dc0 [ 1972.294840][ T8238] ? raw_send_hdrinc+0xa60/0xa60 [ 1972.299781][ T8238] ? raw_send_hdrinc+0xa60/0xa60 [ 1972.304972][ T8238] ip_append_data+0x126/0x150 [ 1972.309727][ T8238] raw_sendmsg+0xa2e/0xc20 [ 1972.314138][ T8238] inet_sendmsg+0x5f/0x80 [ 1972.318472][ T8238] __sys_sendto+0x2a8/0x370 [ 1972.322992][ T8238] ? __cond_resched+0x11/0x40 [ 1972.327831][ T8238] ? fput+0x2d/0x130 [ 1972.332039][ T8238] __x64_sys_sendto+0x74/0x90 [ 1972.336834][ T8238] do_syscall_64+0x3d/0x90 [ 1972.341259][ T8238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1972.347241][ T8238] RIP: 0033:0x4665e9 [ 1972.351123][ T8238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1972.370758][ T8238] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1972.379155][ T8238] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1972.387109][ T8238] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1972.395078][ T8238] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1972.403037][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1972.411078][ T8238] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:41 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x88) 11:15:41 executing program 3 (fault-call:14 fault-nth:35): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xb0bb0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:15:41 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2f, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:41 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x40, 0x4, 0x0, 0x0, 0x6, 0x80, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000180)}, 0x4000, 0x101, 0x5, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2a, 0x0, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x1, 0x9683, 0xf3, 0xe18, 0x19, "e2707d2ae869bc5fa5eb607ee0e9326e8b28c4"}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x4e23, @multicast2}}}, 0x82) 11:15:42 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x30, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:15:42 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0afeffffffffffffffffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1973.311600][ T8290] FAULT_INJECTION: forcing a failure. [ 1973.311600][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 1973.325438][ T8290] CPU: 1 PID: 8290 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1973.335499][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1973.345640][ T8290] Call Trace: [ 1973.348915][ T8290] dump_stack_lvl+0xb7/0x103 [ 1973.353593][ T8290] dump_stack+0x11/0x1a [ 1973.357767][ T8290] should_fail+0x23c/0x250 [ 1973.362207][ T8290] __should_failslab+0x81/0x90 [ 1973.366966][ T8290] should_failslab+0x5/0x20 [ 1973.371500][ T8290] kmem_cache_alloc_node+0x58/0x2b0 [ 1973.376733][ T8290] ? ip_generic_getfrag+0x14a/0x1b0 [ 1973.381939][ T8290] ? __alloc_skb+0xed/0x420 [ 1973.386544][ T8290] __alloc_skb+0xed/0x420 [ 1973.390963][ T8290] __ip_append_data+0x13cd/0x1dc0 [ 1973.395985][ T8290] ? raw_send_hdrinc+0xa60/0xa60 [ 1973.401097][ T8290] ? raw_send_hdrinc+0xa60/0xa60 [ 1973.406051][ T8290] ip_append_data+0x126/0x150 [ 1973.410758][ T8290] raw_sendmsg+0xa2e/0xc20 [ 1973.415176][ T8290] inet_sendmsg+0x5f/0x80 [ 1973.419592][ T8290] __sys_sendto+0x2a8/0x370 [ 1973.424700][ T8290] ? __cond_resched+0x11/0x40 [ 1973.429423][ T8290] ? fput+0x2d/0x130 [ 1973.433535][ T8290] __x64_sys_sendto+0x74/0x90 [ 1973.438319][ T8290] do_syscall_64+0x3d/0x90 [ 1973.442726][ T8290] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1973.448946][ T8290] RIP: 0033:0x4665e9 [ 1973.452838][ T8290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1973.473498][ T8290] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1973.481984][ T8290] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1973.490128][ T8290] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1973.498221][ T8290] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1973.506823][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1973.514803][ T8290] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:42 executing program 3 (fault-call:14 fault-nth:36): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xc0160000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 1973.763322][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 1973.763370][ C0] sd 0:0:1:0: [sg0] tag#541 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1973.780525][ C0] sd 0:0:1:0: [sg0] tag#541 CDB: opcode=0xe5 (vendor) [ 1973.787368][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1973.796860][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1973.806556][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[20]: ba 11:15:43 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0102000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1974.140594][ C0] sd 0:0:1:0: [sg0] tag#547 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1974.151368][ C0] sd 0:0:1:0: [sg0] tag#547 CDB: opcode=0xe5 (vendor) [ 1974.158165][ C0] sd 0:0:1:0: [sg0] tag#547 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1974.167671][ C0] sd 0:0:1:0: [sg0] tag#547 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1974.177458][ C0] sd 0:0:1:0: [sg0] tag#547 CDB[20]: ba [ 1974.179682][ T8321] FAULT_INJECTION: forcing a failure. 11:15:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 1974.179682][ T8321] name failslab, interval 1, probability 0, space 0, times 0 [ 1974.196102][ T8321] CPU: 1 PID: 8321 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1974.206707][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1974.216933][ T8321] Call Trace: [ 1974.220308][ T8321] dump_stack_lvl+0xb7/0x103 [ 1974.224904][ T8321] dump_stack+0x11/0x1a [ 1974.229071][ T8321] should_fail+0x23c/0x250 [ 1974.233532][ T8321] __should_failslab+0x81/0x90 11:15:43 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x31, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1974.238413][ T8321] should_failslab+0x5/0x20 [ 1974.242909][ T8321] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1974.248653][ T8321] ? __kmalloc_node_track_caller+0x30/0x40 [ 1974.254469][ T8321] __kmalloc_node_track_caller+0x30/0x40 [ 1974.260304][ T8321] ? __ip_append_data+0x13cd/0x1dc0 [ 1974.265493][ T8321] __alloc_skb+0x187/0x420 [ 1974.269904][ T8321] __ip_append_data+0x13cd/0x1dc0 [ 1974.275271][ T8321] ? raw_send_hdrinc+0xa60/0xa60 [ 1974.280369][ T8321] ? raw_send_hdrinc+0xa60/0xa60 11:15:43 executing program 2: clock_gettime(0x0, &(0x7f0000001400)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000013c0)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/111, 0x6f}], 0x2, &(0x7f00000012c0)=""/208, 0xd0}, 0x3}], 0x1, 0x40010040, &(0x7f0000001440)={r0, r1+10000000}) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000001480)="0e13b750c98bd3543b70067e337d4c505565f8dc98bc62ed0e8c8bcd2d4c7af3cf81b50de07d626ae1971fc4fb17b8a67e1ca001857f7461bf03eddf808056b8ae40d1b96f8b10bf135f721eb629e359cfca23dec84e849fc49e5341c29fef995993eb515f381c347b63025178338a2a7a8bc3872b2842ab959f6d73e3c110239b3eee783ae5af136623cb519607c02dfd488b9c99e21687dc5f3a8b535d8c09456b63cb0cf440791a75503d3e9694abdefd46a131f025c53dad4b11cd427f44f0ca008123cadf4c67b3f1dcb638de6d6a7e4c93821bfa37830c58", 0xdb) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x80, 0xe3, 0x11, 0x0, 0xffffffffffffffff, 0x82605, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xefe1, 0x0, @perf_config_ext={0x0, 0xec}, 0x1000, 0x100000000, 0x4, 0x3, 0x6, 0x4, 0x5, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r4, 0x2) [ 1974.284995][ C0] sd 0:0:1:0: [sg0] tag#552 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1974.285303][ T8321] ip_append_data+0x126/0x150 [ 1974.295601][ C0] sd 0:0:1:0: [sg0] tag#552 CDB: opcode=0xe5 (vendor) [ 1974.300222][ T8321] raw_sendmsg+0xa2e/0xc20 [ 1974.307191][ C0] sd 0:0:1:0: [sg0] tag#552 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1974.307211][ C0] sd 0:0:1:0: [sg0] tag#552 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1974.307233][ C0] sd 0:0:1:0: [sg0] tag#552 CDB[20]: ba [ 1974.311828][ T8321] inet_sendmsg+0x5f/0x80 [ 1974.340699][ T8321] __sys_sendto+0x2a8/0x370 [ 1974.345213][ T8321] ? __cond_resched+0x11/0x40 [ 1974.349919][ T8321] ? fput+0x2d/0x130 [ 1974.353818][ T8321] __x64_sys_sendto+0x74/0x90 [ 1974.358699][ T8321] do_syscall_64+0x3d/0x90 [ 1974.363205][ T8321] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1974.369187][ T8321] RIP: 0033:0x4665e9 [ 1974.373096][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1974.392920][ T8321] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1974.401330][ T8321] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1974.409475][ T8321] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1974.417556][ T8321] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1974.425525][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1974.433667][ T8321] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:15:43 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x32, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:43 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0103000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:43 executing program 3 (fault-call:14 fault-nth:37): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xc0710000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 1974.912653][ C0] sd 0:0:1:0: [sg0] tag#553 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1974.922942][ C0] sd 0:0:1:0: [sg0] tag#553 CDB: opcode=0xe5 (vendor) [ 1974.929733][ C0] sd 0:0:1:0: [sg0] tag#553 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1974.939233][ C0] sd 0:0:1:0: [sg0] tag#553 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1974.948897][ C0] sd 0:0:1:0: [sg0] tag#553 CDB[20]: ba [ 1975.079628][ T8359] FAULT_INJECTION: forcing a failure. [ 1975.079628][ T8359] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.092446][ T8359] CPU: 1 PID: 8359 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1975.102689][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.112841][ T8359] Call Trace: [ 1975.116380][ T8359] dump_stack_lvl+0xb7/0x103 [ 1975.121057][ T8359] dump_stack+0x11/0x1a [ 1975.125295][ T8359] should_fail+0x23c/0x250 [ 1975.129736][ T8359] __should_failslab+0x81/0x90 [ 1975.134490][ T8359] should_failslab+0x5/0x20 [ 1975.139085][ T8359] kmem_cache_alloc_node+0x58/0x2b0 [ 1975.144474][ T8359] ? ip_generic_getfrag+0x14a/0x1b0 [ 1975.149674][ T8359] ? __alloc_skb+0xed/0x420 [ 1975.154275][ T8359] __alloc_skb+0xed/0x420 [ 1975.158660][ T8359] __ip_append_data+0x13cd/0x1dc0 [ 1975.163704][ T8359] ? raw_send_hdrinc+0xa60/0xa60 [ 1975.168653][ T8359] ? raw_send_hdrinc+0xa60/0xa60 [ 1975.173614][ T8359] ip_append_data+0x126/0x150 [ 1975.178297][ T8359] raw_sendmsg+0xa2e/0xc20 [ 1975.182807][ T8359] inet_sendmsg+0x5f/0x80 [ 1975.187196][ T8359] __sys_sendto+0x2a8/0x370 [ 1975.191790][ T8359] ? __cond_resched+0x11/0x40 [ 1975.196570][ T8359] ? fput+0x2d/0x130 [ 1975.200465][ T8359] __x64_sys_sendto+0x74/0x90 [ 1975.205200][ T8359] do_syscall_64+0x3d/0x90 [ 1975.209619][ T8359] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1975.215516][ T8359] RIP: 0033:0x4665e9 [ 1975.219409][ T8359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1975.239186][ T8359] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1975.247605][ T8359] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1975.255573][ T8359] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1975.263534][ T8359] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1975.271628][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 11:15:44 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x36, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:44 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x35) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x2, 0x4, 0x4, 0x0, 0x7ff, 0x4040, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x6, @perf_bp={&(0x7f0000000000), 0x8}, 0x11208, 0x9, 0x6, 0x9, 0x8, 0xfa, 0x5, 0x0, 0x5, 0x0, 0x80000001}, 0xffffffffffffffff, 0x1, r0, 0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 1975.279773][ T8359] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 [ 1975.387051][ C0] sd 0:0:1:0: [sg0] tag#554 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1975.397332][ C0] sd 0:0:1:0: [sg0] tag#554 CDB: opcode=0xe5 (vendor) [ 1975.404128][ C0] sd 0:0:1:0: [sg0] tag#554 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1975.413582][ C0] sd 0:0:1:0: [sg0] tag#554 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1975.423049][ C0] sd 0:0:1:0: [sg0] tag#554 CDB[20]: ba 11:15:44 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0104000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:44 executing program 3 (fault-call:14 fault-nth:38): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1975.659052][ C0] sd 0:0:1:0: [sg0] tag#556 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1975.669413][ C0] sd 0:0:1:0: [sg0] tag#556 CDB: opcode=0xe5 (vendor) [ 1975.676201][ C0] sd 0:0:1:0: [sg0] tag#556 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1975.685784][ C0] sd 0:0:1:0: [sg0] tag#556 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1975.695232][ C0] sd 0:0:1:0: [sg0] tag#556 CDB[20]: ba 11:15:44 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:44 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xc0cc0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 1975.926844][ C0] sd 0:0:1:0: [sg0] tag#557 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1975.937344][ C0] sd 0:0:1:0: [sg0] tag#557 CDB: opcode=0xe5 (vendor) [ 1975.944104][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1975.954210][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1975.963691][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[20]: ba [ 1976.072541][ T8416] FAULT_INJECTION: forcing a failure. [ 1976.072541][ T8416] name failslab, interval 1, probability 0, space 0, times 0 [ 1976.085282][ T8416] CPU: 1 PID: 8416 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1976.095350][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.105678][ T8416] Call Trace: [ 1976.109131][ T8416] dump_stack_lvl+0xb7/0x103 [ 1976.113781][ T8416] dump_stack+0x11/0x1a [ 1976.118002][ T8416] should_fail+0x23c/0x250 [ 1976.122420][ T8416] __should_failslab+0x81/0x90 [ 1976.127183][ T8416] should_failslab+0x5/0x20 [ 1976.131679][ T8416] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1976.137402][ T8416] ? __kmalloc_node_track_caller+0x30/0x40 [ 1976.143284][ T8416] __kmalloc_node_track_caller+0x30/0x40 [ 1976.148920][ T8416] ? __ip_append_data+0x13cd/0x1dc0 [ 1976.154114][ T8416] __alloc_skb+0x187/0x420 [ 1976.158551][ T8416] __ip_append_data+0x13cd/0x1dc0 [ 1976.163591][ T8416] ? raw_send_hdrinc+0xa60/0xa60 [ 1976.168597][ T8416] ? raw_send_hdrinc+0xa60/0xa60 [ 1976.173571][ T8416] ip_append_data+0x126/0x150 [ 1976.178408][ T8416] raw_sendmsg+0xa2e/0xc20 [ 1976.182862][ T8416] inet_sendmsg+0x5f/0x80 [ 1976.187205][ T8416] __sys_sendto+0x2a8/0x370 [ 1976.191713][ T8416] ? __cond_resched+0x11/0x40 [ 1976.196437][ T8416] ? fput+0x2d/0x130 [ 1976.200622][ T8416] __x64_sys_sendto+0x74/0x90 [ 1976.205318][ T8416] do_syscall_64+0x3d/0x90 [ 1976.209729][ T8416] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1976.215624][ T8416] RIP: 0033:0x4665e9 [ 1976.219534][ T8416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1976.239233][ T8416] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1976.247801][ T8416] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1976.255770][ T8416] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1976.263785][ T8416] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1976.271742][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1976.279707][ T8416] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:15:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:15:45 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000280)={0x81, 0x800, 0xff, 0x7fffffff, 0x9, "211e871cb2fbccdb55608dc99c706bb0c77559"}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r2 = fork() tkill(r2, 0x21) socket$inet(0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0xcff, 0x2) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0xfffffffc, 0xff, 0xffff0000, 0x8, 0x16, "33be4c1aaf999513d384bf0b3cb94ce1ff299c"}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) r7 = openat2(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x4000, 0x2, 0x9}, 0x18) ioctl$TIOCNXCL(r7, 0x540d) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="bf10029845c1dcbd4d2a37fd8bfc2a0eeeb1321eab2ee6c84cebe4e2a60235b780d80f5fe950c34a2ef24d76b215826d726731a92c98041cfb9c7af87f9104252d8c70ecef3134d2eae9a8c70a913d40550a2ba090899bdaa1218688bd64c320920764b3bdb444ea40031d9c4b53d792d722424530e97cef88c041e19081bf77975240dcced30b567a080000004ed5e5a800"/160, @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080002000100000004000480100008800800078008000600000000000800010000000000"], 0x38}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:45 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0105000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:45 executing program 3 (fault-call:14 fault-nth:39): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1976.388253][ C0] sd 0:0:1:0: [sg0] tag#560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1976.398532][ C0] sd 0:0:1:0: [sg0] tag#560 CDB: opcode=0xe5 (vendor) [ 1976.405285][ C0] sd 0:0:1:0: [sg0] tag#560 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1976.414858][ C0] sd 0:0:1:0: [sg0] tag#560 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1976.424331][ C0] sd 0:0:1:0: [sg0] tag#560 CDB[20]: ba [ 1976.662480][ T8444] FAULT_INJECTION: forcing a failure. [ 1976.662480][ T8444] name failslab, interval 1, probability 0, space 0, times 0 [ 1976.675141][ T8444] CPU: 1 PID: 8444 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1976.685423][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.695488][ T8444] Call Trace: [ 1976.698756][ T8444] dump_stack_lvl+0xb7/0x103 [ 1976.703338][ T8444] dump_stack+0x11/0x1a [ 1976.707479][ T8444] should_fail+0x23c/0x250 [ 1976.711918][ T8444] __should_failslab+0x81/0x90 [ 1976.716664][ T8444] should_failslab+0x5/0x20 [ 1976.721151][ T8444] kmem_cache_alloc_node+0x58/0x2b0 [ 1976.726344][ T8444] ? ip_generic_getfrag+0x14a/0x1b0 [ 1976.731823][ T8444] ? __alloc_skb+0xed/0x420 [ 1976.736310][ T8444] __alloc_skb+0xed/0x420 [ 1976.740645][ T8444] __ip_append_data+0x13cd/0x1dc0 [ 1976.745654][ T8444] ? raw_send_hdrinc+0xa60/0xa60 [ 1976.750754][ T8444] ? raw_send_hdrinc+0xa60/0xa60 [ 1976.755683][ T8444] ip_append_data+0x126/0x150 [ 1976.760348][ T8444] raw_sendmsg+0xa2e/0xc20 [ 1976.764773][ T8444] inet_sendmsg+0x5f/0x80 [ 1976.769187][ T8444] __sys_sendto+0x2a8/0x370 [ 1976.773688][ T8444] ? __cond_resched+0x11/0x40 [ 1976.778550][ T8444] ? fput+0x2d/0x130 [ 1976.782507][ T8444] __x64_sys_sendto+0x74/0x90 [ 1976.787293][ T8444] do_syscall_64+0x3d/0x90 [ 1976.791822][ T8444] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1976.797763][ T8444] RIP: 0033:0x4665e9 [ 1976.801746][ T8444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1976.821349][ T8444] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1976.829749][ T8444] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1976.837729][ T8444] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1976.845684][ T8444] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1976.853638][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1976.861680][ T8444] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 [ 1976.882760][ C0] sd 0:0:1:0: [sg0] tag#561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1976.893403][ C0] sd 0:0:1:0: [sg0] tag#561 CDB: opcode=0xe5 (vendor) [ 1976.900302][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1976.909913][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1976.919734][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[20]: ba 11:15:46 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:46 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0106000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1977.564888][ C0] sd 0:0:1:0: [sg0] tag#562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1977.575177][ C0] sd 0:0:1:0: [sg0] tag#562 CDB: opcode=0xe5 (vendor) [ 1977.581975][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1977.591447][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1977.601154][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[20]: ba 11:15:46 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000100000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00000000000000000000000000000002000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000369d76630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7f, 0x7, 0x40, 0x7, 0x0, 0x8, 0x14, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0xfffffffffffffffa, 0x100, 0x9, 0x2, 0x7ff, 0x1000, 0x0, 0x401, 0x0, 0x7f}, 0xffffffffffffffff, 0x3, r1, 0x8) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:46 executing program 3 (fault-call:14 fault-nth:40): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:15:46 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x3, 0x0, @multicast2}}}, 0x88) [ 1977.918592][ T8477] FAULT_INJECTION: forcing a failure. [ 1977.918592][ T8477] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.931350][ T8477] CPU: 1 PID: 8477 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1977.941409][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1977.951726][ T8477] Call Trace: [ 1977.955012][ T8477] dump_stack_lvl+0xb7/0x103 [ 1977.959587][ T8477] dump_stack+0x11/0x1a [ 1977.963751][ T8477] should_fail+0x23c/0x250 [ 1977.968162][ T8477] __should_failslab+0x81/0x90 [ 1977.973101][ T8477] should_failslab+0x5/0x20 [ 1977.977638][ T8477] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1977.983368][ T8477] ? __kmalloc_node_track_caller+0x30/0x40 [ 1977.989201][ T8477] __kmalloc_node_track_caller+0x30/0x40 [ 1977.994887][ T8477] ? __ip_append_data+0x13cd/0x1dc0 [ 1978.000066][ T8477] __alloc_skb+0x187/0x420 [ 1978.004594][ T8477] __ip_append_data+0x13cd/0x1dc0 [ 1978.009622][ T8477] ? raw_send_hdrinc+0xa60/0xa60 [ 1978.014992][ T8477] ? raw_send_hdrinc+0xa60/0xa60 [ 1978.019918][ T8477] ip_append_data+0x126/0x150 [ 1978.025023][ T8477] raw_sendmsg+0xa2e/0xc20 [ 1978.029501][ T8477] inet_sendmsg+0x5f/0x80 [ 1978.033889][ T8477] __sys_sendto+0x2a8/0x370 [ 1978.038439][ T8477] ? __cond_resched+0x11/0x40 [ 1978.043620][ T8477] ? fput+0x2d/0x130 [ 1978.047870][ T8477] __x64_sys_sendto+0x74/0x90 [ 1978.052638][ T8477] do_syscall_64+0x3d/0x90 [ 1978.057040][ T8477] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1978.063100][ T8477] RIP: 0033:0x4665e9 [ 1978.066996][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1978.086584][ T8477] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1978.095071][ T8477] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1978.103285][ T8477] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1978.111416][ T8477] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1978.119729][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1978.127685][ T8477] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:47 executing program 3 (fault-call:14 fault-nth:41): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xc8050000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:47 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0107000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:47 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r1, 0x4) socket$inet(0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(0xffffffffffffffff, 0x0) 11:15:47 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x4, 0x0, @multicast2}}}, 0x88) 11:15:47 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0108000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:47 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a3093042e5c7511294b70f60a840ed8829ad1c6d984cd4adcd90f5413e98b114d59e56b2ba5074d43e5535f78f2abdf8e25d4c93e4430a8694ff037e09cdcb8d972196a798e20bbf8dc525e679e0d55f1a19d1cbd50a98d72e60f1befcf5875e5e2e9334520634cf04194b9867f452e8bf6c330c111b500006f81662711c10cee66dd56388dbd65d23ec0ec8cf72b5bae9445e860847bc0a8d58e9431fe01000000000000008c9843d82deaf99169c10a85d524820244618abc05dece332ed63483d59c5fd86187e6e6e508af4feb95f1aa60b07be7d6dca8465a800d185bdb654eca9c59feb304"], 0xfc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r4 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) splice(r3, &(0x7f0000000000)=0xfff, r4, &(0x7f0000000040), 0x40, 0x79b1f7dd67c6b454) [ 1978.743293][ T8527] FAULT_INJECTION: forcing a failure. [ 1978.743293][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.756009][ T8527] CPU: 1 PID: 8527 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1978.766376][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.776821][ T8527] Call Trace: [ 1978.780093][ T8527] dump_stack_lvl+0xb7/0x103 [ 1978.784715][ T8527] dump_stack+0x11/0x1a [ 1978.789393][ T8527] should_fail+0x23c/0x250 [ 1978.794155][ T8527] __should_failslab+0x81/0x90 [ 1978.798938][ T8527] should_failslab+0x5/0x20 [ 1978.803436][ T8527] kmem_cache_alloc_node+0x58/0x2b0 [ 1978.808932][ T8527] ? ip_generic_getfrag+0x14a/0x1b0 [ 1978.814137][ T8527] ? __alloc_skb+0xed/0x420 [ 1978.818750][ T8527] __alloc_skb+0xed/0x420 [ 1978.823084][ T8527] __ip_append_data+0x13cd/0x1dc0 [ 1978.828185][ T8527] ? raw_send_hdrinc+0xa60/0xa60 [ 1978.833122][ T8527] ? raw_send_hdrinc+0xa60/0xa60 [ 1978.838077][ T8527] ip_append_data+0x126/0x150 [ 1978.842827][ T8527] raw_sendmsg+0xa2e/0xc20 [ 1978.847368][ T8527] inet_sendmsg+0x5f/0x80 [ 1978.851962][ T8527] __sys_sendto+0x2a8/0x370 [ 1978.856549][ T8527] ? __cond_resched+0x11/0x40 [ 1978.861223][ T8527] ? fput+0x2d/0x130 [ 1978.865115][ T8527] __x64_sys_sendto+0x74/0x90 [ 1978.870684][ T8527] do_syscall_64+0x3d/0x90 [ 1978.875133][ T8527] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1978.881035][ T8527] RIP: 0033:0x4665e9 [ 1978.885114][ T8527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1978.904976][ T8527] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1978.913395][ T8527] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1978.921374][ T8527] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1978.929487][ T8527] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 11:15:47 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCCBRK(r1, 0x5428) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r3, &(0x7f0000000180)={'syz1', "70d52bd44b63b40cdf2d6f140d1ccbe8b4f88ecdcaf7607bd6c52354827fed28526943351fdcacad698e64078b6b845df4df7e2a962d3c63f1e39d097258dcd69773b37de88a63170b3fa18b7163264a6ae4bc140c54c1f5e10445dddebb17dbcaf4d8d9b08873517a41b63f9d080426c22daa2cf20f933cadd3a0a169f4de1fb2a68fead4a95677b92de557bf2168f22c0bc1ec18d81a5d32275d8a603c1acb9c8d3ebc9584f366134ffef085214b200776830d0e8eef8bb0d4ab1e3f38967f22e06b51e804450b7804840c55962b17e0062239892043b8"}, 0xdc) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x28e, 0x6b0b, 0x2, 0xfffff000, 0x17, "458569466592b36a4510f2c80779753bf4fd8b"}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000080)) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1978.937649][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1978.945964][ T8527] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:15:48 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0118000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(0xffffffffffffffff, 0x0) 11:15:48 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:48 executing program 3 (fault-call:14 fault-nth:42): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1979.471360][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 1979.471388][ C0] sd 0:0:1:0: [sg0] tag#527 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1979.488261][ C0] sd 0:0:1:0: [sg0] tag#527 CDB: opcode=0xe5 (vendor) [ 1979.495087][ C0] sd 0:0:1:0: [sg0] tag#527 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1979.504548][ C0] sd 0:0:1:0: [sg0] tag#527 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1979.514244][ C0] sd 0:0:1:0: [sg0] tag#527 CDB[20]: ba [ 1979.524294][ T8557] FAULT_INJECTION: forcing a failure. [ 1979.524294][ T8557] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.537533][ T8557] CPU: 1 PID: 8557 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1979.547613][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1979.557939][ T8557] Call Trace: [ 1979.561215][ T8557] dump_stack_lvl+0xb7/0x103 [ 1979.565811][ T8557] dump_stack+0x11/0x1a [ 1979.570129][ T8557] should_fail+0x23c/0x250 [ 1979.574533][ T8557] __should_failslab+0x81/0x90 [ 1979.579438][ T8557] should_failslab+0x5/0x20 [ 1979.584023][ T8557] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1979.589941][ T8557] ? __kmalloc_node_track_caller+0x30/0x40 [ 1979.595737][ T8557] __kmalloc_node_track_caller+0x30/0x40 [ 1979.601492][ T8557] ? __ip_append_data+0x13cd/0x1dc0 [ 1979.606920][ T8557] __alloc_skb+0x187/0x420 [ 1979.611513][ T8557] __ip_append_data+0x13cd/0x1dc0 [ 1979.616611][ T8557] ? raw_send_hdrinc+0xa60/0xa60 [ 1979.621538][ T8557] ? raw_send_hdrinc+0xa60/0xa60 [ 1979.626536][ T8557] ip_append_data+0x126/0x150 [ 1979.631205][ T8557] raw_sendmsg+0xa2e/0xc20 [ 1979.635820][ T8557] inet_sendmsg+0x5f/0x80 [ 1979.640701][ T8557] __sys_sendto+0x2a8/0x370 [ 1979.645281][ T8557] ? __cond_resched+0x11/0x40 [ 1979.649995][ T8557] ? fput+0x2d/0x130 [ 1979.653975][ T8557] __x64_sys_sendto+0x74/0x90 [ 1979.658638][ T8557] do_syscall_64+0x3d/0x90 [ 1979.663124][ T8557] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1979.669007][ T8557] RIP: 0033:0x4665e9 [ 1979.672884][ T8557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1979.692685][ T8557] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1979.701096][ T8557] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1979.709417][ T8557] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1979.717563][ T8557] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1979.725518][ T8557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1979.733770][ T8557] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:15:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xd0270000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:49 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x141140, 0x0) r0 = gettid() tkill(r0, 0x34) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, r0, 0x6, r1, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$setopts(0x4200, r2, 0x5, 0x40) socket$inet(0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x1f, {{0x2, 0x0, @multicast1}}}, 0x88) 11:15:49 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a011c000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:49 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x6, @multicast2}}}, 0x88) 11:15:49 executing program 3 (fault-call:14 fault-nth:43): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(0xffffffffffffffff, 0x0) 11:15:49 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000e90000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000058000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002dee194e5aa63c8201009197f9c33bfd5b8825f4d26a2d693d7332e678d2e4ffb5bf1b0c5bb7c4845d02a17b5cde62cbfffee2c2a9c423024ee0fbc"], 0x310) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, r1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x0, 0x0, 0x6, 0x0, 0x1121, 0x800, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0x5, 0x10000}, 0xa92c, 0x7, 0x7, 0x6, 0x1, 0x20, 0x3a, 0x0, 0x0, 0x0, 0x4}, r0, 0x10, r2, 0x8) r3 = clone3(&(0x7f00000003c0)={0x100900000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), {0x21}, &(0x7f0000000200)=""/214, 0xd6, &(0x7f0000000300)=""/89, &(0x7f0000000380)=[r0, r0, r0, r0, r0, 0x0], 0x6, {r2}}, 0x58) ptrace$setopts(0x4206, r3, 0x3, 0x100009) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1980.521992][ C0] sd 0:0:1:0: [sg0] tag#528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1980.532568][ C0] sd 0:0:1:0: [sg0] tag#528 CDB: opcode=0xe5 (vendor) [ 1980.539834][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1980.549495][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1980.559180][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[20]: ba [ 1980.646108][ T8571] FAULT_INJECTION: forcing a failure. [ 1980.646108][ T8571] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.658825][ T8571] CPU: 1 PID: 8571 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1980.668977][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.679177][ T8571] Call Trace: [ 1980.682466][ T8571] dump_stack_lvl+0xb7/0x103 [ 1980.687182][ T8571] dump_stack+0x11/0x1a [ 1980.691337][ T8571] should_fail+0x23c/0x250 [ 1980.695762][ T8571] __should_failslab+0x81/0x90 [ 1980.700529][ T8571] should_failslab+0x5/0x20 [ 1980.705347][ T8571] kmem_cache_alloc_node+0x58/0x2b0 [ 1980.710552][ T8571] ? ip_generic_getfrag+0x14a/0x1b0 [ 1980.715871][ T8571] ? __alloc_skb+0xed/0x420 [ 1980.720372][ T8571] __alloc_skb+0xed/0x420 [ 1980.724705][ T8571] __ip_append_data+0x13cd/0x1dc0 [ 1980.729875][ T8571] ? raw_send_hdrinc+0xa60/0xa60 [ 1980.734850][ T8571] ? raw_send_hdrinc+0xa60/0xa60 [ 1980.739779][ T8571] ip_append_data+0x126/0x150 [ 1980.744524][ T8571] raw_sendmsg+0xa2e/0xc20 [ 1980.748929][ T8571] inet_sendmsg+0x5f/0x80 [ 1980.753247][ T8571] __sys_sendto+0x2a8/0x370 [ 1980.757738][ T8571] ? __cond_resched+0x11/0x40 [ 1980.762415][ T8571] ? fput+0x2d/0x130 [ 1980.766347][ T8571] __x64_sys_sendto+0x74/0x90 [ 1980.771175][ T8571] do_syscall_64+0x3d/0x90 [ 1980.775580][ T8571] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1980.781462][ T8571] RIP: 0033:0x4665e9 [ 1980.785342][ T8571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.805102][ T8571] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1980.813496][ T8571] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1980.821468][ T8571] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1980.829425][ T8571] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1980.837480][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1980.845447][ T8571] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1980.950562][ C0] sd 0:0:1:0: [sg0] tag#529 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1980.960846][ C0] sd 0:0:1:0: [sg0] tag#529 CDB: opcode=0xe5 (vendor) [ 1980.967620][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1980.977099][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1980.986576][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[20]: ba 11:15:50 executing program 3 (fault-call:14 fault-nth:44): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:50 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x14, @multicast2}}}, 0x88) 11:15:50 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0126000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:50 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x4, 0x6, 0x200}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x2) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1981.507556][ C0] sd 0:0:1:0: [sg0] tag#530 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1981.517839][ C0] sd 0:0:1:0: [sg0] tag#530 CDB: opcode=0xe5 (vendor) [ 1981.524676][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1981.534171][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1981.543648][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[20]: ba 11:15:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 1981.845276][ T8613] FAULT_INJECTION: forcing a failure. [ 1981.845276][ T8613] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.857913][ T8613] CPU: 1 PID: 8613 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1981.867977][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.878128][ T8613] Call Trace: [ 1981.881405][ T8613] dump_stack_lvl+0xb7/0x103 [ 1981.886131][ T8613] dump_stack+0x11/0x1a [ 1981.890289][ T8613] should_fail+0x23c/0x250 [ 1981.894702][ T8613] __should_failslab+0x81/0x90 [ 1981.899459][ T8613] should_failslab+0x5/0x20 [ 1981.903987][ T8613] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1981.909756][ T8613] ? __kmalloc_node_track_caller+0x30/0x40 [ 1981.915615][ T8613] __kmalloc_node_track_caller+0x30/0x40 [ 1981.921238][ T8613] ? __ip_append_data+0x13cd/0x1dc0 [ 1981.926429][ T8613] __alloc_skb+0x187/0x420 [ 1981.930836][ T8613] __ip_append_data+0x13cd/0x1dc0 [ 1981.935856][ T8613] ? raw_send_hdrinc+0xa60/0xa60 [ 1981.940868][ T8613] ? raw_send_hdrinc+0xa60/0xa60 [ 1981.945814][ T8613] ip_append_data+0x126/0x150 [ 1981.950596][ T8613] raw_sendmsg+0xa2e/0xc20 [ 1981.955004][ T8613] inet_sendmsg+0x5f/0x80 [ 1981.959322][ T8613] __sys_sendto+0x2a8/0x370 [ 1981.963860][ T8613] ? __cond_resched+0x11/0x40 [ 1981.968527][ T8613] ? fput+0x2d/0x130 [ 1981.972411][ T8613] __x64_sys_sendto+0x74/0x90 [ 1981.977080][ T8613] do_syscall_64+0x3d/0x90 [ 1981.981490][ T8613] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1981.987371][ T8613] RIP: 0033:0x4665e9 [ 1981.991507][ T8613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1982.011495][ T8613] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1982.019895][ T8613] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1982.027935][ T8613] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1982.035891][ T8613] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1982.043961][ T8613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1982.051957][ T8613] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:15:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xd0820000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:51 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x7) r2 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r3 = signalfd(r1, &(0x7f0000000200)={[0x6]}, 0x8) sendto$inet(r3, &(0x7f0000000240)="158bd664baa3e579507c4ea05d8366e879bb32e6628aefaa886b164142377a9e97133ae201cb2e32e0ee2df92e0e992e1a26a6ce4b8ec6ae9f97ef93fd3a81fdf9b5557dc78ec8389154c32714f1d7b88fb1026fa2f8a430c1e21ceb4fb4b8a18e184adb78cdd2d03f7fb22c5a52b504285fd6", 0x73, 0x40804, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="42bd06a3f8fbde524e", 0x9, 0x10, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x20) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:51 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a01fe000000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:51 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x29, @multicast2}}}, 0x88) [ 1982.620279][ C0] sd 0:0:1:0: [sg0] tag#531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1982.630969][ C0] sd 0:0:1:0: [sg0] tag#531 CDB: opcode=0xe5 (vendor) [ 1982.637737][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1982.647231][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1982.656695][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[20]: ba 11:15:51 executing program 3 (fault-call:14 fault-nth:45): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:15:51 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0104020000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1982.866390][ C0] sd 0:0:1:0: [sg0] tag#532 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1982.876658][ C0] sd 0:0:1:0: [sg0] tag#532 CDB: opcode=0xe5 (vendor) [ 1982.883409][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1982.893047][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1982.902697][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[20]: ba [ 1982.911017][ T8646] FAULT_INJECTION: forcing a failure. [ 1982.911017][ T8646] name failslab, interval 1, probability 0, space 0, times 0 [ 1982.923751][ T8646] CPU: 1 PID: 8646 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1982.933889][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.944021][ T8646] Call Trace: [ 1982.947305][ T8646] dump_stack_lvl+0xb7/0x103 [ 1982.951895][ T8646] dump_stack+0x11/0x1a [ 1982.956053][ T8646] should_fail+0x23c/0x250 [ 1982.960531][ T8646] __should_failslab+0x81/0x90 [ 1982.965308][ T8646] should_failslab+0x5/0x20 [ 1982.969803][ T8646] kmem_cache_alloc_node+0x58/0x2b0 [ 1982.975008][ T8646] ? ip_generic_getfrag+0x14a/0x1b0 [ 1982.980257][ T8646] ? __alloc_skb+0xed/0x420 [ 1982.984756][ T8646] __alloc_skb+0xed/0x420 [ 1982.989106][ T8646] __ip_append_data+0x13cd/0x1dc0 [ 1982.994131][ T8646] ? raw_send_hdrinc+0xa60/0xa60 [ 1982.999073][ T8646] ? raw_send_hdrinc+0xa60/0xa60 [ 1983.004061][ T8646] ip_append_data+0x126/0x150 [ 1983.008772][ T8646] raw_sendmsg+0xa2e/0xc20 [ 1983.013175][ T8646] inet_sendmsg+0x5f/0x80 [ 1983.017488][ T8646] __sys_sendto+0x2a8/0x370 [ 1983.022053][ T8646] ? __cond_resched+0x11/0x40 [ 1983.026814][ T8646] ? fput+0x2d/0x130 [ 1983.030698][ T8646] __x64_sys_sendto+0x74/0x90 [ 1983.035474][ T8646] do_syscall_64+0x3d/0x90 [ 1983.039901][ T8646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1983.045800][ T8646] RIP: 0033:0x4665e9 [ 1983.049692][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1983.069351][ T8646] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1983.077858][ T8646] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1983.085904][ T8646] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1983.093888][ T8646] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1983.101857][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1983.109815][ T8646] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 [ 1983.179705][ C0] sd 0:0:1:0: [sg0] tag#533 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.190003][ C0] sd 0:0:1:0: [sg0] tag#533 CDB: opcode=0xe5 (vendor) [ 1983.197316][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.206793][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1983.216352][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[20]: ba 11:15:52 executing program 3 (fault-call:14 fault-nth:46): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:52 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x600, @multicast2}}}, 0x88) 11:15:52 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80800, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 1983.512464][ T8659] FAULT_INJECTION: forcing a failure. [ 1983.512464][ T8659] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.525091][ T8659] CPU: 1 PID: 8659 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1983.535164][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.545209][ T8659] Call Trace: [ 1983.548476][ T8659] dump_stack_lvl+0xb7/0x103 [ 1983.553058][ T8659] dump_stack+0x11/0x1a [ 1983.557213][ T8659] should_fail+0x23c/0x250 [ 1983.561635][ T8659] __should_failslab+0x81/0x90 [ 1983.566474][ T8659] should_failslab+0x5/0x20 [ 1983.570970][ T8659] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1983.576684][ T8659] ? __kmalloc_node_track_caller+0x30/0x40 [ 1983.582494][ T8659] __kmalloc_node_track_caller+0x30/0x40 [ 1983.588160][ T8659] ? __ip_append_data+0x13cd/0x1dc0 [ 1983.591321][ C0] sd 0:0:1:0: [sg0] tag#534 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1983.593420][ T8659] __alloc_skb+0x187/0x420 [ 1983.603701][ C0] sd 0:0:1:0: [sg0] tag#534 CDB: opcode=0xe5 (vendor) [ 1983.608044][ T8659] __ip_append_data+0x13cd/0x1dc0 [ 1983.608066][ T8659] ? raw_send_hdrinc+0xa60/0xa60 [ 1983.615250][ C0] sd 0:0:1:0: [sg0] tag#534 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1983.615269][ C0] sd 0:0:1:0: [sg0] tag#534 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1983.615304][ C0] sd 0:0:1:0: [sg0] tag#534 CDB[20]: ba [ 1983.620302][ T8659] ? raw_send_hdrinc+0xa60/0xa60 [ 1983.654704][ T8659] ip_append_data+0x126/0x150 [ 1983.659389][ T8659] raw_sendmsg+0xa2e/0xc20 [ 1983.663863][ T8659] inet_sendmsg+0x5f/0x80 [ 1983.668196][ T8659] __sys_sendto+0x2a8/0x370 [ 1983.672808][ T8659] ? __cond_resched+0x11/0x40 [ 1983.677498][ T8659] ? fput+0x2d/0x130 [ 1983.681410][ T8659] __x64_sys_sendto+0x74/0x90 [ 1983.686097][ T8659] do_syscall_64+0x3d/0x90 [ 1983.690512][ T8659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1983.696408][ T8659] RIP: 0033:0x4665e9 [ 1983.700293][ T8659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1983.719994][ T8659] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1983.728407][ T8659] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1983.736362][ T8659] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1983.744328][ T8659] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1983.752314][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1983.760272][ T8659] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:52 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x1400, @multicast2}}}, 0x88) 11:15:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xd0dd0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:52 executing program 3 (fault-call:14 fault-nth:47): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:52 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100030000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1984.144341][ C0] sd 0:0:1:0: [sg0] tag#535 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1984.154734][ C0] sd 0:0:1:0: [sg0] tag#535 CDB: opcode=0xe5 (vendor) [ 1984.161500][ C0] sd 0:0:1:0: [sg0] tag#535 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1984.170973][ C0] sd 0:0:1:0: [sg0] tag#535 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1984.180438][ C0] sd 0:0:1:0: [sg0] tag#535 CDB[20]: ba 11:15:53 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x2900, @multicast2}}}, 0x88) [ 1984.308106][ T8684] FAULT_INJECTION: forcing a failure. [ 1984.308106][ T8684] name failslab, interval 1, probability 0, space 0, times 0 [ 1984.320824][ T8684] CPU: 1 PID: 8684 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1984.330891][ T8684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.340940][ T8684] Call Trace: [ 1984.344209][ T8684] dump_stack_lvl+0xb7/0x103 [ 1984.348830][ T8684] dump_stack+0x11/0x1a [ 1984.352991][ T8684] should_fail+0x23c/0x250 11:15:53 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0102040000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r5 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r5, 0x0) [ 1984.357493][ T8684] __should_failslab+0x81/0x90 [ 1984.362254][ T8684] should_failslab+0x5/0x20 [ 1984.366785][ T8684] kmem_cache_alloc_node+0x58/0x2b0 [ 1984.371986][ T8684] ? ip_generic_getfrag+0x14a/0x1b0 [ 1984.373245][ C0] sd 0:0:1:0: [sg0] tag#536 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1984.377272][ T8684] ? __alloc_skb+0xed/0x420 [ 1984.377294][ T8684] __alloc_skb+0xed/0x420 [ 1984.387554][ C0] sd 0:0:1:0: [sg0] tag#536 CDB: opcode=0xe5 (vendor) [ 1984.391997][ T8684] __ip_append_data+0x13cd/0x1dc0 [ 1984.396336][ C0] sd 0:0:1:0: [sg0] tag#536 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1984.403023][ T8684] ? raw_send_hdrinc+0xa60/0xa60 [ 1984.408040][ C0] sd 0:0:1:0: [sg0] tag#536 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1984.417466][ T8684] ? raw_send_hdrinc+0xa60/0xa60 [ 1984.422396][ C0] sd 0:0:1:0: [sg0] tag#536 CDB[20]: ba [ 1984.431806][ T8684] ip_append_data+0x126/0x150 [ 1984.447050][ T8684] raw_sendmsg+0xa2e/0xc20 [ 1984.451503][ T8684] inet_sendmsg+0x5f/0x80 [ 1984.455929][ T8684] __sys_sendto+0x2a8/0x370 [ 1984.460451][ T8684] ? __cond_resched+0x11/0x40 [ 1984.465145][ T8684] ? fput+0x2d/0x130 [ 1984.469045][ T8684] __x64_sys_sendto+0x74/0x90 [ 1984.473760][ T8684] do_syscall_64+0x3d/0x90 [ 1984.478177][ T8684] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1984.484105][ T8684] RIP: 0033:0x4665e9 [ 1984.487986][ T8684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1984.507703][ T8684] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1984.516205][ T8684] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1984.524170][ T8684] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1984.532388][ T8684] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1984.540379][ T8684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1984.548365][ T8684] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:53 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x9, 0x2, 0x2, 0x1, 0x0, 0x7, 0x2c919, 0x4de74defff1146f6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x885, 0x1, @perf_config_ext={0x2aa, 0x67}, 0x2000, 0x6, 0xffffffff, 0x3, 0x6, 0x2, 0x6, 0x0, 0x80000000, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r0, 0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:53 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2=0xe0000003}}}, 0x88) 11:15:53 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0106040000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:53 executing program 3 (fault-call:14 fault-nth:48): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1984.876026][ C0] sd 0:0:1:0: [sg0] tag#537 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1984.886357][ C0] sd 0:0:1:0: [sg0] tag#537 CDB: opcode=0xe5 (vendor) [ 1984.893122][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1984.902621][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1984.912104][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[20]: ba 11:15:54 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2=0xe0000004}}}, 0x88) [ 1985.136126][ C0] sd 0:0:1:0: [sg0] tag#538 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1985.146438][ C0] sd 0:0:1:0: [sg0] tag#538 CDB: opcode=0xe5 (vendor) [ 1985.153200][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1985.162701][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1985.172182][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[20]: ba 11:15:54 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0180040000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xe0000000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:54 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r5 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r5, 0x0) [ 1985.327830][ T8746] FAULT_INJECTION: forcing a failure. [ 1985.327830][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.340485][ T8746] CPU: 1 PID: 8746 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1985.350601][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.360658][ T8746] Call Trace: [ 1985.362719][ C0] sd 0:0:1:0: [sg0] tag#519 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1985.363956][ T8746] dump_stack_lvl+0xb7/0x103 [ 1985.374231][ C0] sd 0:0:1:0: [sg0] tag#519 CDB: opcode=0xe5 (vendor) [ 1985.378761][ T8746] dump_stack+0x11/0x1a [ 1985.378782][ T8746] should_fail+0x23c/0x250 [ 1985.385538][ C0] sd 0:0:1:0: [sg0] tag#519 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1985.389699][ T8746] __should_failslab+0x81/0x90 [ 1985.394186][ C0] sd 0:0:1:0: [sg0] tag#519 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1985.403598][ T8746] should_failslab+0x5/0x20 [ 1985.403618][ T8746] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1985.408370][ C0] sd 0:0:1:0: [sg0] tag#519 CDB[20]: ba [ 1985.417775][ T8746] ? __kmalloc_node_track_caller+0x30/0x40 [ 1985.417803][ T8746] __kmalloc_node_track_caller+0x30/0x40 [ 1985.445308][ T8746] ? __ip_append_data+0x13cd/0x1dc0 [ 1985.450629][ T8746] __alloc_skb+0x187/0x420 [ 1985.455036][ T8746] __ip_append_data+0x13cd/0x1dc0 [ 1985.460051][ T8746] ? raw_send_hdrinc+0xa60/0xa60 [ 1985.465054][ T8746] ? raw_send_hdrinc+0xa60/0xa60 [ 1985.470132][ T8746] ip_append_data+0x126/0x150 [ 1985.474834][ T8746] raw_sendmsg+0xa2e/0xc20 [ 1985.479278][ T8746] inet_sendmsg+0x5f/0x80 [ 1985.483707][ T8746] __sys_sendto+0x2a8/0x370 [ 1985.488218][ T8746] ? __cond_resched+0x11/0x40 [ 1985.492953][ T8746] ? fput+0x2d/0x130 [ 1985.496899][ T8746] __x64_sys_sendto+0x74/0x90 [ 1985.501631][ T8746] do_syscall_64+0x3d/0x90 [ 1985.506039][ T8746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1985.511953][ T8746] RIP: 0033:0x4665e9 [ 1985.515836][ T8746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1985.535702][ T8746] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1985.544128][ T8746] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1985.552109][ T8746] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1985.560079][ T8746] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1985.568040][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1985.576098][ T8746] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1985.666735][ C0] sd 0:0:1:0: [sg0] tag#526 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1985.677022][ C0] sd 0:0:1:0: [sg0] tag#526 CDB: opcode=0xe5 (vendor) [ 1985.683796][ C0] sd 0:0:1:0: [sg0] tag#526 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1985.693298][ C0] sd 0:0:1:0: [sg0] tag#526 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1985.702802][ C0] sd 0:0:1:0: [sg0] tag#526 CDB[20]: ba 11:15:54 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:54 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x20000148) 11:15:54 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100050000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xe0380000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 1986.215297][ C0] sd 0:0:1:0: [sg0] tag#529 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1986.225584][ C0] sd 0:0:1:0: [sg0] tag#529 CDB: opcode=0xe5 (vendor) [ 1986.232323][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1986.241817][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1986.251290][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[20]: ba 11:15:55 executing program 3 (fault-call:14 fault-nth:49): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r5 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r5, 0x0) 11:15:55 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0144050000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:55 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x2) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = dup3(r0, r0, 0x80000) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000000)={0x0, 0x0, 0x7}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x5, 0x5, 0xff, 0x7, 0xa, "16b951d2b46976e0761d09400d699e371967e2"}) 11:15:55 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) r2 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000300)={0x2000}) ioctl$TIOCNXCL(r0, 0x540d) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0)) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @empty}}}, 0x88) [ 1986.554221][ C0] sd 0:0:1:0: [sg0] tag#537 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1986.564583][ C0] sd 0:0:1:0: [sg0] tag#537 CDB: opcode=0xe5 (vendor) [ 1986.571357][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1986.580847][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1986.590333][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[20]: ba [ 1986.714225][ T8803] FAULT_INJECTION: forcing a failure. [ 1986.714225][ T8803] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.726867][ T8803] CPU: 1 PID: 8803 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1986.736928][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.747012][ T8803] Call Trace: [ 1986.750356][ T8803] dump_stack_lvl+0xb7/0x103 [ 1986.754936][ T8803] dump_stack+0x11/0x1a [ 1986.759154][ T8803] should_fail+0x23c/0x250 [ 1986.763672][ T8803] __should_failslab+0x81/0x90 [ 1986.768430][ T8803] should_failslab+0x5/0x20 [ 1986.772977][ T8803] kmem_cache_alloc_node+0x58/0x2b0 [ 1986.778178][ T8803] ? ip_generic_getfrag+0x14a/0x1b0 [ 1986.783387][ T8803] ? __alloc_skb+0xed/0x420 [ 1986.787880][ T8803] __alloc_skb+0xed/0x420 [ 1986.792204][ T8803] __ip_append_data+0x13cd/0x1dc0 [ 1986.797223][ T8803] ? raw_send_hdrinc+0xa60/0xa60 [ 1986.802196][ T8803] ? raw_send_hdrinc+0xa60/0xa60 [ 1986.807202][ T8803] ip_append_data+0x126/0x150 [ 1986.811881][ T8803] raw_sendmsg+0xa2e/0xc20 [ 1986.816307][ T8803] inet_sendmsg+0x5f/0x80 [ 1986.820694][ T8803] __sys_sendto+0x2a8/0x370 [ 1986.825218][ T8803] ? __cond_resched+0x11/0x40 [ 1986.829904][ T8803] ? fput+0x2d/0x130 [ 1986.833800][ T8803] __x64_sys_sendto+0x74/0x90 [ 1986.838474][ T8803] do_syscall_64+0x3d/0x90 [ 1986.842898][ T8803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1986.848850][ T8803] RIP: 0033:0x4665e9 [ 1986.852738][ T8803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1986.872628][ T8803] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1986.881134][ T8803] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1986.889122][ T8803] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1986.897088][ T8803] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1986.899264][ C0] sd 0:0:1:0: [sg0] tag#540 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 11:15:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) [ 1986.905081][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1986.905095][ T8803] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1986.931295][ C0] sd 0:0:1:0: [sg0] tag#540 CDB: opcode=0xe5 (vendor) [ 1986.938168][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1986.947665][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1986.957158][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[20]: ba 11:15:55 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100060000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:56 executing program 3 (fault-call:14 fault-nth:50): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:56 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1987.180549][ T8839] FAULT_INJECTION: forcing a failure. [ 1987.180549][ T8839] name failslab, interval 1, probability 0, space 0, times 0 [ 1987.193215][ T8839] CPU: 1 PID: 8839 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1987.203456][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1987.213513][ T8839] Call Trace: [ 1987.216798][ T8839] dump_stack_lvl+0xb7/0x103 [ 1987.221382][ T8839] dump_stack+0x11/0x1a [ 1987.225529][ T8839] should_fail+0x23c/0x250 [ 1987.230003][ T8839] __should_failslab+0x81/0x90 [ 1987.234799][ T8839] should_failslab+0x5/0x20 [ 1987.239309][ T8839] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1987.245109][ T8839] ? __kmalloc_node_track_caller+0x30/0x40 [ 1987.251021][ T8839] __kmalloc_node_track_caller+0x30/0x40 [ 1987.256656][ T8839] ? __ip_append_data+0x13cd/0x1dc0 [ 1987.262084][ T8839] __alloc_skb+0x187/0x420 [ 1987.266492][ T8839] __ip_append_data+0x13cd/0x1dc0 [ 1987.271642][ T8839] ? raw_send_hdrinc+0xa60/0xa60 [ 1987.276620][ T8839] ? raw_send_hdrinc+0xa60/0xa60 [ 1987.281557][ T8839] ip_append_data+0x126/0x150 [ 1987.286323][ T8839] raw_sendmsg+0xa2e/0xc20 [ 1987.290724][ T8839] inet_sendmsg+0x5f/0x80 [ 1987.295050][ T8839] __sys_sendto+0x2a8/0x370 [ 1987.299730][ T8839] ? __cond_resched+0x11/0x40 [ 1987.304395][ T8839] ? fput+0x2d/0x130 [ 1987.308286][ T8839] __x64_sys_sendto+0x74/0x90 [ 1987.312973][ T8839] do_syscall_64+0x3d/0x90 [ 1987.317377][ T8839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1987.323256][ T8839] RIP: 0033:0x4665e9 [ 1987.327137][ T8839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1987.346732][ T8839] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1987.355215][ T8839] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1987.363188][ T8839] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1987.371152][ T8839] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1987.379105][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1987.387221][ T8839] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:56 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0104060000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xe0930000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:56 executing program 3 (fault-call:14 fault-nth:51): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1987.896356][ C0] sd 0:0:1:0: [sg0] tag#543 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1987.906631][ C0] sd 0:0:1:0: [sg0] tag#543 CDB: opcode=0xe5 (vendor) [ 1987.913409][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1987.922880][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1987.932491][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[20]: ba 11:15:56 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x3f, 0x9, 0x7, 0x1f, 0x0, 0x8, 0x1, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x40, 0x92e, 0xf0f9, 0x2, 0xd25b, 0xf0, 0x3f7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"b0a5b5ce79410682dd241a1c44520525", 0x0, 0x0, {0x20, 0xc}, {0x4, 0x7ca53893}, 0x101, [0x3, 0x4, 0xc9d, 0x0, 0x15de, 0x4, 0x6, 0x4, 0x20, 0x1f, 0x4, 0x6, 0xfff, 0xffff, 0x3a, 0x5]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000280)={{r0}, r1, 0x20, @unused=[0x2, 0x8, 0x3, 0x1], @name="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"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_tcp_int(r2, 0x6, 0x98bbb8b7ffeb0c1a, &(0x7f0000001280)=0x5a2b, 0x4) 11:15:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) [ 1988.120003][ T8858] FAULT_INJECTION: forcing a failure. [ 1988.120003][ T8858] name failslab, interval 1, probability 0, space 0, times 0 [ 1988.133165][ T8858] CPU: 1 PID: 8858 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1988.143321][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.153376][ T8858] Call Trace: [ 1988.156840][ T8858] dump_stack_lvl+0xb7/0x103 [ 1988.161444][ T8858] dump_stack+0x11/0x1a [ 1988.165594][ T8858] should_fail+0x23c/0x250 [ 1988.170069][ T8858] __should_failslab+0x81/0x90 [ 1988.175155][ T8858] should_failslab+0x5/0x20 [ 1988.179715][ T8858] kmem_cache_alloc_node+0x58/0x2b0 [ 1988.179812][ C0] sd 0:0:1:0: [sg0] tag#550 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1988.184912][ T8858] ? ip_generic_getfrag+0x14a/0x1b0 [ 1988.195196][ C0] sd 0:0:1:0: [sg0] tag#550 CDB: opcode=0xe5 (vendor) [ 1988.200437][ T8858] ? __alloc_skb+0xed/0x420 [ 1988.207224][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1988.211655][ T8858] __alloc_skb+0xed/0x420 [ 1988.221110][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1988.225385][ T8858] __ip_append_data+0x13cd/0x1dc0 [ 1988.225408][ T8858] ? raw_send_hdrinc+0xa60/0xa60 [ 1988.235197][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[20]: ba [ 1988.240175][ T8858] ? raw_send_hdrinc+0xa60/0xa60 [ 1988.255568][ T8858] ip_append_data+0x126/0x150 [ 1988.260269][ T8858] raw_sendmsg+0xa2e/0xc20 [ 1988.264702][ T8858] inet_sendmsg+0x5f/0x80 [ 1988.269054][ T8858] __sys_sendto+0x2a8/0x370 [ 1988.273553][ T8858] ? __cond_resched+0x11/0x40 [ 1988.278350][ T8858] ? fput+0x2d/0x130 [ 1988.282234][ T8858] __x64_sys_sendto+0x74/0x90 [ 1988.286932][ T8858] do_syscall_64+0x3d/0x90 [ 1988.291333][ T8858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1988.297248][ T8858] RIP: 0033:0x4665e9 [ 1988.301226][ T8858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1988.320991][ T8858] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1988.329439][ T8858] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1988.337497][ T8858] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1988.345542][ T8858] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1988.353506][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1988.361503][ T8858] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:57 executing program 3 (fault-call:14 fault-nth:52): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:57 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100070000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1988.742389][ C0] sd 0:0:1:0: [sg0] tag#512 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1988.752717][ C0] sd 0:0:1:0: [sg0] tag#512 CDB: opcode=0xe5 (vendor) [ 1988.759982][ C0] sd 0:0:1:0: [sg0] tag#512 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1988.769467][ C0] sd 0:0:1:0: [sg0] tag#512 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1988.778957][ C0] sd 0:0:1:0: [sg0] tag#512 CDB[20]: ba 11:15:57 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0108100000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xe0ee0000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 1989.105328][ T8884] FAULT_INJECTION: forcing a failure. [ 1989.105328][ T8884] name failslab, interval 1, probability 0, space 0, times 0 [ 1989.117971][ T8884] CPU: 1 PID: 8884 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1989.128044][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1989.138127][ T8884] Call Trace: [ 1989.141415][ T8884] dump_stack_lvl+0xb7/0x103 [ 1989.145999][ T8884] dump_stack+0x11/0x1a [ 1989.150143][ T8884] should_fail+0x23c/0x250 [ 1989.154551][ T8884] __should_failslab+0x81/0x90 [ 1989.159298][ T8884] should_failslab+0x5/0x20 [ 1989.163802][ T8884] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1989.169544][ T8884] ? __kmalloc_node_track_caller+0x30/0x40 [ 1989.175470][ T8884] __kmalloc_node_track_caller+0x30/0x40 [ 1989.181189][ T8884] ? __ip_append_data+0x13cd/0x1dc0 [ 1989.186551][ T8884] __alloc_skb+0x187/0x420 [ 1989.190972][ T8884] __ip_append_data+0x13cd/0x1dc0 [ 1989.196008][ T8884] ? raw_send_hdrinc+0xa60/0xa60 [ 1989.200937][ T8884] ? raw_send_hdrinc+0xa60/0xa60 [ 1989.205862][ T8884] ip_append_data+0x126/0x150 [ 1989.210703][ T8884] raw_sendmsg+0xa2e/0xc20 [ 1989.215181][ T8884] inet_sendmsg+0x5f/0x80 [ 1989.219585][ T8884] __sys_sendto+0x2a8/0x370 [ 1989.224089][ T8884] ? __cond_resched+0x11/0x40 [ 1989.229315][ T8884] ? fput+0x2d/0x130 [ 1989.233249][ T8884] __x64_sys_sendto+0x74/0x90 [ 1989.237918][ T8884] do_syscall_64+0x3d/0x90 [ 1989.242325][ T8884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1989.248207][ T8884] RIP: 0033:0x4665e9 [ 1989.252081][ T8884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1989.272067][ T8884] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1989.280472][ T8884] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1989.288526][ T8884] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1989.296497][ T8884] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1989.304453][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1989.312409][ T8884] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:15:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:15:58 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x40000, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:15:58 executing program 3 (fault-call:14 fault-nth:53): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:15:58 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100180000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1990.114068][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 1990.114094][ C0] sd 0:0:1:0: [sg0] tag#561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1990.130987][ C0] sd 0:0:1:0: [sg0] tag#561 CDB: opcode=0xe5 (vendor) [ 1990.137794][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1990.147299][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1990.156783][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[20]: ba [ 1990.417297][ C0] sd 0:0:1:0: [sg0] tag#525 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1990.427620][ C0] sd 0:0:1:0: [sg0] tag#525 CDB: opcode=0xe5 (vendor) [ 1990.434385][ C0] sd 0:0:1:0: [sg0] tag#525 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1990.443871][ C0] sd 0:0:1:0: [sg0] tag#525 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1990.453348][ C0] sd 0:0:1:0: [sg0] tag#525 CDB[20]: ba 11:15:59 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004eac0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "5080dc634f267f"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000537c0)={{0x0, 0x0, 0x80000001, 0x9, 0x0, 0xff, 0x100, 0x0, 0x1991, 0xba04, 0x3f, 0x4, 0x50f7b37b, 0xfa8, 0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000547c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000549c0)={{0x0, 0xb67d, 0x20, 0x4383, 0x8001, 0x2, 0x9, 0x101, 0x1ff, 0x7, 0x8, 0x2, 0x7fd2710, 0x80000000, 0x1}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054a80)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "d7f8a86d036f15"}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x700000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004eac0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x40, "5080dc634f267f"}) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x700000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004eac0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {0x0}], 0x40, "5080dc634f267f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055a80)={0x100020000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "33ede63d5fb6b1"}) r15 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x700000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004eac0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x40, "5080dc634f267f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056a80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {r4, r5}, {}, {r8, r12}, {r14, r17}], 0x8b, "e5976f9669acd8"}) 11:15:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:15:59 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a01001c0000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:15:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xf0490000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:15:59 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x2000000000400000, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3) r3 = socket$inet(0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x40) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) statx(0xffffffffffffff9c, &(0x7f0000001780)='./file0\x00', 0x100, 0x2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = signalfd4(r2, &(0x7f0000001ec0)={[0x1ff]}, 0x8, 0x80800) r8 = accept(r3, &(0x7f0000001f00)=@ieee802154={0x24, @long}, &(0x7f0000001f80)=0x80) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001fc0)=0x0) stat(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000a40)="ac9dc51faaca5dc206b9962581442815a130d4d626840e1e381d77ceaa7503ff00d5a64df26e9ef7178176c9f9893969f217edf9ccb2a70c0d184a238bf1c7ba65ccc361de41a44c8b078749cb58928178338fa582be85163b05945d6d60a9fbcdce571623", 0x65}, {&(0x7f0000000ac0)="4c728b592365439fc3a6508f439f8a5ed67400ee84bf269f59422eaa1ea92d8654198cd8ab87a0f93c2065b9b7c361e0b7d82fd8387b050c2298bdd362c198f0e5dd2e2c54feb26f02aed32971a1b4be5783ec0fad6821c67966778802da82422595a2cef7189be5a19f4c8187b6dfa03299312f368d5d08f2d95d7d19708ce7db739fb6af8e6ec09d7250f6390dbdd3256abdb2b3139ea83a0cf84279302aaa699baf630b149dc5b91eb0ee4a27090d5eda12203d64aa3153c880d6e2eae4c7c035704d1dd7bc96efbb727e259099ac115ac047c183138de345c694", 0xdc}, {&(0x7f0000000bc0)="127810fd819455d6e6d0a73ebb30d247af50d445ddf9b102c919368c41d75e22f47beab75714e68671382b1fe4f3a9b32cb5abc7f873f855af317c0570fcab7dcedb35a8b42bfa6ce3a4de8a184e24b358829e502c0347bd91c9fa7d5646e8064d2f9b1c940e37183d80a1ed87daf4595de07d2882c3d36847f82ec49d5f8e409e9935529fbb494f38f21e2d3acdad8e0305ffff9bb45d436e7ec6d65a1f802882a5063e26a7245ef258cf135f36cd2173d45016e02857e91d5f6ec6", 0xbc}, {&(0x7f0000000c80)="72dc2b0a4a1f7f9fc4bd5b7bc754faee90bd99979ecb26155c6697527a254b8e1b8a1ac63915bbaa244a1361920772687c707fb104a29b14ab429ee8882f76013b44cd945cf0ccdc58cbd59d", 0x4c}], 0x4}}, {{&(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="69e7fac62222c6a3f9ed0db2c6e67c5a12f2b862cd18e58647de78115391a0caae2c75c082ac6147c61e75d222a4b88ae6265934a5f3b5d2b0673f6859f2713e6009e81b8596c836c459a00014cb", 0x4e}, {&(0x7f0000000180)="c3f88af4b732e50cd8b71010b3d1a6cf6bd74be806722bed48bd073deaed16139a23d75ee1e8a87a20c84ce3fa34e21c92d7ab225557808fe47f8e1e8160df5ad4df77a1ad31818a16a27521cebd0650027c", 0x52}], 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000000000000000000000a25bb14a000000b4e105b7b94fa2dee7697821cdc4df4dcd5cb4ef37c07ea3a10400000000000000c7937f1105b3010244fc8a4f92128d84869a4bbc3b00a4544eb62c4d0b55621927637c1897b9ab84bc4b536b124a976838ff5085ac2380ebd7bf8955fdad41576c3a5006c3595bbcc96e13f09e04f937bc", @ANYRES32, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x140, 0x10}}, {{&(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001240)="083ea82b42c4cd2a0739461798bfae052c8d5ab4f6b0129cc4021a920e69db32ec9d024b79f0a37c97ef9d5a780c789650f5d8b7b2035c5a114802ed0eee09a4ad0bd7a84695e72e1a8b1064270cba6a6903977807655a880e5bcc5df8243662b95d27e5d4e0dca9f5914a6cba9b7ae71fc0cb73425af28a58aa92566cf7b1fd92eca582a2edfc68a0639818e98bc7b4ff327eff778f726cc9bcda37fbb1e67e9e388c130e50de13742d1a661866d81b9041e3b13c375443ec15a5d95de5acc4548f023f4edd1225a8096c30", 0xcc}, {&(0x7f0000001340)}, {&(0x7f0000001380)="386759a506fe6e34183c548c13af542d2a376c951fcf97dc61dcf0d66050dc687550fd5eb1a73e56e7504af8d449608fb15ea661f2eb07adaca13122e36bb75cd2d5de77f60b498f716abdb8ed54903a0108700be8c5371b7b55747bbc117529d96057", 0x63}, {&(0x7f0000001400)="e29cb8af96960da0cc60b2a4add1a019031d6308f536fd2282f7929a6d888488def3ade159409642cf490c94f70f5be33a606f43500bea534d0e8f39e4398519b063d473216fe7187f06eb08b4ea08d6aa1a7c80611a5a1025b4707493cc9097c7a02f32cc365357fc030affb261717c262e05cf5e0a406d86628a08be5b9a424aa1284d6f034a516adc7b8a5f1c2aa8a0d9023d85d561c4bfe48520584fc2bdc7e32e5bb08914961fb7f8bd5e09ff8a317486b12cdbf64ab8fb2bfd1c580bb0f0828a3ad5ca", 0xc6}, {&(0x7f0000001500)="476de8c5c9881b487b2a9e16d1434eb9eb6d3962054690f439e7211e3078450c1e37dd8b49117296f2a34c9a3ab9b0320566fa2d869fe5e3dfd94d8f396ed8170139b28278a886739967f75a62e0124a032ab4f09644114a543aaa686f0206612b23d55e3ab38bc2250b", 0x6a}, {&(0x7f0000001580)="46c3d02afe0245", 0x7}, {&(0x7f00000015c0)="e655f27dad2b3dd6f04f59082988b61d084dbd4c809906380d58be9e0c114519", 0x20}, {&(0x7f0000001600)="8b6f6bbe081cfc5d", 0x8}, {&(0x7f0000001640)="fbaa22d704573f86a1bc5b937c11640dea80d8f28bfef4956cfacaad475ee99a0490d4950de3e8e9eb6a123650bde451a78352332f6e3437d2f3b16566270d55b763205ffc17e6773d14c99db76f4dd176c8460bab8163125a9483450f394efa6c7fdd0ae8a2a1ade5762c4df8aa1f1a0d7431ed558883c29697dd", 0x7b}], 0x9, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}], 0x40, 0x4000040}}, {{&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001980)="bf21270d6e5ff6ee871a36cdaf87ae8d623fc190576849250abec04e8bbbb43ea33f3d3993d075a27dc9aeac495ce57bd6c2191e7652b4814074831d47cdb5f5e8918674e77fca21aea5af19f74b486f7cc5d28371e0aa1cb9f73a77a755dc", 0x5f}, {&(0x7f0000001a00)="b2f5ed6d6b426f05ef8442742ebb595a588deda5e6bd8eab90b1c038d1f994e6f7b0962e96c95461d2bd527da3e150e154d2e5af2014c4347508bae2d9df87dcd54368b5a67bed0b748b77b77ee0732f6d63f3c467ff8a2d7d826dc8478264be89f67c01a8bf1b177baabe2cfbd5ecdf2d9ecfd60563fadefed8f74b8b03dc84868b82ab9e10cec2d091be5ed7764cae60536e5ebe03e2ce45fd39853de94f768303a41e11d5461e25afc739092b6e33f2278222e1f644a627c3f9ddb708409d44077b64cd5e3f", 0xc7}, {&(0x7f0000001b00)="9a1a4ff2ab979007cf9f42fdc4e0a2f9b80df5bde0686713cd10233b7407e462e36794ea06", 0x25}, {&(0x7f0000001b40)="85674e42368f0cba32b7083e0d7f563c41a790aa849c366fc3376e", 0x1b}, {&(0x7f0000001b80)="2ca89fdc10fe6b732b2bd967214b473cba16af9b7c3acf6af3815326b45a0609463356f62e0067c4ab45f441e2b6f7d9cb3f1bbb60233aed35d860160d355dc1eeb0098c6bf328646591dca8fbc79bd727addf1f65fda11d6591e3fe6dfa1f869b1d", 0x62}, {&(0x7f0000001c00)="561b6b1611739db23aad0e7411a197493a148fe3d4321507a902a863dca5df77de07da11c729decf4d46f4913ddf326efb82a641b91a441f4183c2683f0a363fbbad2ab231d38ce3b03c12c716950ae2a36aa9df1e2b5bb06051", 0x5a}, {&(0x7f0000001c80)="2c37f9094faedbf3a807a80c2f2913227e39f593a3e8dea0418a97aae5b9b82144834231acc2a76e952ac6540c2d7a167b7c56d55c6d5cbc41e0446b7ece10aea48bcd9b6845ebc12a787611887a9bbf79157e8ec819207487bfe3f80e605a3168641dbcae52883a4e081c9cec8d7e2db22018dda517dda3903cb05e7bca5d3c20c6d7191b7565dd2d3dcbfefc10b7dc1d74cfda", 0x94}, {&(0x7f0000001d40)="a8060a645521f3651553c6ddf3a832cf26c9b5f702e11736324bc6bcaeb7ed28698f167f021b01e159c1c2ac0e6f8a979db60bf48e86d8eccc914c5b65e97b66897ea8be427cb35884014631f9280028ae8162c783000db9e540b3f65bd228d4705dce61cf9069b197ec9a6edc816881d669b65e8de4d73b253fca47c8cc20409952807ef4bb907d82813c3dd762e8e618267f73e72069bc5d3f5558894fd1716fa79e563588ff55fd395c739a7c84305699f8e98408c3d58b1372ea0c24d96a85dc7a6a22a918826b5fbb12436e6a13d8827d7dc360757427418b9f91c393b56ca2e3f3220a95a803", 0xe9}], 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00004f000000000100000001000000adef5ce60a9c2ae8f8134c97cf904e7fb8b4fd815aec06e6b45bc1a4f13efd40ce76ae9448c1ffee53c95e8d122311bf5e3d15db45450e0302f3bfe0ffe6392214452d611c93ca086865123764497741d1cea3e5e860c0a752236225c8c104636ee87a8adae32e88725f125e5adffcf8e7028576f98145c5320c1110d73e1270d097cc0ad5485afb9a20930b79422ac83ebc3ce22cb09e126631d4d60147cc3975d70e030e0c1dc4dba9e9ed9ec0fea582e67ff3865344ec1f070cd9230dbc617995", @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}], 0x4, 0x40040c0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1990.943630][ C0] sd 0:0:1:0: [sg0] tag#547 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1990.953943][ C0] sd 0:0:1:0: [sg0] tag#547 CDB: opcode=0xe5 (vendor) [ 1990.960851][ C0] sd 0:0:1:0: [sg0] tag#547 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1990.970357][ C0] sd 0:0:1:0: [sg0] tag#547 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1990.980110][ C0] sd 0:0:1:0: [sg0] tag#547 CDB[20]: ba [ 1991.125478][ T8942] FAULT_INJECTION: forcing a failure. [ 1991.125478][ T8942] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.138120][ T8942] CPU: 1 PID: 8942 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1991.148197][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.158252][ T8942] Call Trace: [ 1991.161529][ T8942] dump_stack_lvl+0xb7/0x103 [ 1991.166124][ T8942] dump_stack+0x11/0x1a [ 1991.170457][ T8942] should_fail+0x23c/0x250 [ 1991.174919][ T8942] __should_failslab+0x81/0x90 [ 1991.179674][ T8942] should_failslab+0x5/0x20 [ 1991.184173][ T8942] kmem_cache_alloc_node+0x58/0x2b0 [ 1991.189374][ T8942] ? ip_generic_getfrag+0x14a/0x1b0 [ 1991.194586][ T8942] ? __alloc_skb+0xed/0x420 [ 1991.199104][ T8942] __alloc_skb+0xed/0x420 [ 1991.203484][ T8942] __ip_append_data+0x13cd/0x1dc0 [ 1991.208508][ T8942] ? raw_send_hdrinc+0xa60/0xa60 [ 1991.213451][ T8942] ? raw_send_hdrinc+0xa60/0xa60 [ 1991.218399][ T8942] ip_append_data+0x126/0x150 [ 1991.223087][ T8942] raw_sendmsg+0xa2e/0xc20 [ 1991.227517][ T8942] inet_sendmsg+0x5f/0x80 [ 1991.231897][ T8942] __sys_sendto+0x2a8/0x370 [ 1991.236554][ T8942] ? __cond_resched+0x11/0x40 [ 1991.241233][ T8942] ? fput+0x2d/0x130 [ 1991.245131][ T8942] __x64_sys_sendto+0x74/0x90 [ 1991.249857][ T8942] do_syscall_64+0x3d/0x90 [ 1991.254268][ T8942] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1991.260249][ T8942] RIP: 0033:0x4665e9 [ 1991.264130][ T8942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1991.284109][ T8942] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1991.292671][ T8942] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1991.300990][ T8942] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1991.309132][ T8942] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1991.317122][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 11:16:00 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100200000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:00 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7f, 0x2, 0x1, 0xe1, 0x0, 0x5, 0x10, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x1, 0x9, 0x8000, 0x3, 0x1ff, 0x5, 0x6, 0x0, 0x68e1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:00 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0xfffffffe, {{0x2, 0x4e20, @multicast2}}}, 0x83) [ 1991.325287][ T8942] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1991.397413][ C0] sd 0:0:1:0: [sg0] tag#548 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1991.407795][ C0] sd 0:0:1:0: [sg0] tag#548 CDB: opcode=0xe5 (vendor) [ 1991.414746][ C0] sd 0:0:1:0: [sg0] tag#548 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1991.424238][ C0] sd 0:0:1:0: [sg0] tag#548 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1991.433835][ C0] sd 0:0:1:0: [sg0] tag#548 CDB[20]: ba [ 1991.697497][ C0] sd 0:0:1:0: [sg0] tag#549 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1991.708002][ C0] sd 0:0:1:0: [sg0] tag#549 CDB: opcode=0xe5 (vendor) [ 1991.714983][ C0] sd 0:0:1:0: [sg0] tag#549 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1991.725074][ C0] sd 0:0:1:0: [sg0] tag#549 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1991.734645][ C0] sd 0:0:1:0: [sg0] tag#549 CDB[20]: ba 11:16:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:00 executing program 3 (fault-call:14 fault-nth:54): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:16:00 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:00 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100260000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:00 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1991.887780][ C0] sd 0:0:1:0: [sg0] tag#550 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1991.898115][ C0] sd 0:0:1:0: [sg0] tag#550 CDB: opcode=0xe5 (vendor) [ 1991.904918][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1991.914402][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1991.924060][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[20]: ba [ 1991.947221][ T8985] FAULT_INJECTION: forcing a failure. [ 1991.947221][ T8985] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.959910][ T8985] CPU: 1 PID: 8985 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1991.969994][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.980845][ T8985] Call Trace: [ 1991.984190][ T8985] dump_stack_lvl+0xb7/0x103 [ 1991.989226][ T8985] dump_stack+0x11/0x1a [ 1991.993468][ T8985] should_fail+0x23c/0x250 [ 1991.998279][ T8985] __should_failslab+0x81/0x90 [ 1992.003277][ T8985] should_failslab+0x5/0x20 [ 1992.007784][ T8985] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1992.013539][ T8985] ? __kmalloc_node_track_caller+0x30/0x40 [ 1992.019563][ T8985] __kmalloc_node_track_caller+0x30/0x40 [ 1992.025213][ T8985] ? __ip_append_data+0x13cd/0x1dc0 [ 1992.030467][ T8985] __alloc_skb+0x187/0x420 [ 1992.034952][ T8985] __ip_append_data+0x13cd/0x1dc0 [ 1992.035465][ C0] sd 0:0:1:0: [sg0] tag#557 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1992.040146][ T8985] ? raw_send_hdrinc+0xa60/0xa60 [ 1992.050530][ C0] sd 0:0:1:0: [sg0] tag#557 CDB: opcode=0xe5 (vendor) [ 1992.055446][ T8985] ? raw_send_hdrinc+0xa60/0xa60 [ 1992.055473][ T8985] ip_append_data+0x126/0x150 [ 1992.062536][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1992.067446][ T8985] raw_sendmsg+0xa2e/0xc20 [ 1992.067473][ T8985] inet_sendmsg+0x5f/0x80 [ 1992.072146][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1992.081697][ T8985] __sys_sendto+0x2a8/0x370 [ 1992.086137][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[20]: ba [ 1992.090441][ T8985] ? __cond_resched+0x11/0x40 [ 1992.114704][ T8985] ? fput+0x2d/0x130 [ 1992.118601][ T8985] __x64_sys_sendto+0x74/0x90 [ 1992.123325][ T8985] do_syscall_64+0x3d/0x90 [ 1992.127853][ T8985] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1992.133866][ T8985] RIP: 0033:0x4665e9 [ 1992.137779][ T8985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1992.157488][ T8985] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1992.166031][ T8985] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1992.175345][ T8985] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1992.184000][ T8985] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1992.192759][ T8985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1992.200913][ T8985] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:16:01 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c) dup3(0xffffffffffffffff, r2, 0x0) 11:16:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r5 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r5, 0x0) 11:16:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xf0a40000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:01 executing program 3 (fault-call:14 fault-nth:55): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1992.452198][ C0] sd 0:0:1:0: [sg0] tag#528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1992.462582][ C0] sd 0:0:1:0: [sg0] tag#528 CDB: opcode=0xe5 (vendor) [ 1992.469381][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1992.478860][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1992.488640][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[20]: ba [ 1992.579024][ T9021] FAULT_INJECTION: forcing a failure. [ 1992.579024][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 1992.592132][ T9021] CPU: 1 PID: 9021 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1992.602421][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.612579][ T9021] Call Trace: [ 1992.615953][ T9021] dump_stack_lvl+0xb7/0x103 [ 1992.620535][ T9021] dump_stack+0x11/0x1a [ 1992.624675][ T9021] should_fail+0x23c/0x250 [ 1992.629086][ T9021] __should_failslab+0x81/0x90 [ 1992.633925][ T9021] should_failslab+0x5/0x20 [ 1992.638429][ T9021] kmem_cache_alloc_node+0x58/0x2b0 [ 1992.643662][ T9021] ? ip_generic_getfrag+0x14a/0x1b0 [ 1992.648856][ T9021] ? __alloc_skb+0xed/0x420 [ 1992.653682][ T9021] __alloc_skb+0xed/0x420 [ 1992.658030][ T9021] __ip_append_data+0x13cd/0x1dc0 [ 1992.663235][ T9021] ? raw_send_hdrinc+0xa60/0xa60 [ 1992.668238][ T9021] ? raw_send_hdrinc+0xa60/0xa60 [ 1992.673256][ T9021] ip_append_data+0x126/0x150 [ 1992.677931][ T9021] raw_sendmsg+0xa2e/0xc20 [ 1992.682425][ T9021] inet_sendmsg+0x5f/0x80 [ 1992.686832][ T9021] __sys_sendto+0x2a8/0x370 [ 1992.691327][ T9021] ? __cond_resched+0x11/0x40 [ 1992.696347][ T9021] ? fput+0x2d/0x130 [ 1992.700304][ T9021] __x64_sys_sendto+0x74/0x90 [ 1992.704971][ T9021] do_syscall_64+0x3d/0x90 [ 1992.709402][ T9021] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1992.715416][ T9021] RIP: 0033:0x4665e9 [ 1992.719386][ T9021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1992.739342][ T9021] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1992.747761][ T9021] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1992.756154][ T9021] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1992.764373][ T9021] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1992.772651][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1992.780616][ T9021] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:16:02 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x800, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x40, 0x1f, 0x5, 0x0, 0x0, 0x100000001, 0x5008, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x200}, 0x2200, 0x8, 0x9a, 0x7, 0x682b, 0x4b, 0x4, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xf, r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r5 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r5, 0x0) 11:16:02 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a01003f0000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:02 executing program 3 (fault-call:14 fault-nth:56): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1993.496067][ C0] sd 0:0:1:0: [sg0] tag#540 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1993.506499][ C0] sd 0:0:1:0: [sg0] tag#540 CDB: opcode=0xe5 (vendor) [ 1993.513447][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1993.517828][ T9047] FAULT_INJECTION: forcing a failure. [ 1993.517828][ T9047] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.523107][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 11:16:02 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffb00000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8, 0x8, 0xff, 0x3f, 0x0, 0xfff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x4, @perf_config_ext={0x10000, 0x80000000000000}, 0x40001, 0x8, 0x6, 0x8, 0x401, 0x3, 0xfffb, 0x0, 0x9}, 0x0, 0x8, r1, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1993.535770][ T9047] CPU: 1 PID: 9047 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1993.545303][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[20]: ba [ 1993.555424][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1993.555436][ T9047] Call Trace: [ 1993.555443][ T9047] dump_stack_lvl+0xb7/0x103 [ 1993.579516][ T9047] dump_stack+0x11/0x1a [ 1993.583734][ T9047] should_fail+0x23c/0x250 [ 1993.588239][ T9047] __should_failslab+0x81/0x90 [ 1993.593309][ T9047] should_failslab+0x5/0x20 [ 1993.597816][ T9047] kmem_cache_alloc_node+0x58/0x2b0 [ 1993.603317][ T9047] ? ip_generic_getfrag+0x14a/0x1b0 [ 1993.608520][ T9047] ? __alloc_skb+0xed/0x420 [ 1993.613178][ T9047] __alloc_skb+0xed/0x420 [ 1993.617547][ T9047] __ip_append_data+0x13cd/0x1dc0 [ 1993.622622][ T9047] ? raw_send_hdrinc+0xa60/0xa60 [ 1993.627739][ T9047] ? raw_send_hdrinc+0xa60/0xa60 [ 1993.632733][ T9047] ip_append_data+0x126/0x150 [ 1993.637830][ T9047] raw_sendmsg+0xa2e/0xc20 [ 1993.642429][ T9047] inet_sendmsg+0x5f/0x80 [ 1993.646770][ T9047] __sys_sendto+0x2a8/0x370 [ 1993.651462][ T9047] ? __cond_resched+0x11/0x40 [ 1993.656206][ T9047] ? fput+0x2d/0x130 [ 1993.660092][ T9047] __x64_sys_sendto+0x74/0x90 [ 1993.664881][ T9047] do_syscall_64+0x3d/0x90 [ 1993.669307][ T9047] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1993.675195][ T9047] RIP: 0033:0x4665e9 [ 1993.679977][ T9047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1993.699657][ T9047] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1993.708369][ T9047] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1993.716329][ T9047] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000005 [ 1993.724287][ T9047] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1993.732263][ T9047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1993.740220][ T9047] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 [ 1993.963373][ C0] sd 0:0:1:0: [sg0] tag#541 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1993.973790][ C0] sd 0:0:1:0: [sg0] tag#541 CDB: opcode=0xe5 (vendor) [ 1993.980574][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1993.990603][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1994.000073][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[20]: ba 11:16:03 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x7, 0x3, 0x1000}, {0x1, 0x5, 0x1800}, {0x1, 0x9, 0x1800}, {0x1, 0x9}], 0x4) r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0xfffffffffffffff7, 0x40400) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140)=0x3, 0x4) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x24ea, {{0x2, 0x4e20, @multicast2}}}, 0x88) r3 = syz_open_pts(0xffffffffffffffff, 0x460081) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000000)={0x40, 0x7, 0x4}) r4 = semget$private(0x0, 0x4, 0x40) semctl$IPC_RMID(r4, 0x0, 0x0) 11:16:03 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100400000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r5 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r5, 0x0) 11:16:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xfe000000}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:03 executing program 3 (fault-call:14 fault-nth:57): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:16:03 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0105440000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:03 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) [ 1994.871148][ T9076] FAULT_INJECTION: forcing a failure. [ 1994.871148][ T9076] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.884177][ T9076] CPU: 1 PID: 9076 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1994.894241][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1994.904296][ T9076] Call Trace: [ 1994.907572][ T9076] dump_stack_lvl+0xb7/0x103 [ 1994.912161][ T9076] dump_stack+0x11/0x1a [ 1994.916375][ T9076] should_fail+0x23c/0x250 [ 1994.920798][ T9076] __should_failslab+0x81/0x90 [ 1994.925556][ T9076] should_failslab+0x5/0x20 [ 1994.930055][ T9076] kmem_cache_alloc_node+0x58/0x2b0 [ 1994.935361][ T9076] ? ip_generic_getfrag+0x14a/0x1b0 [ 1994.940587][ T9076] ? __alloc_skb+0xed/0x420 [ 1994.945093][ T9076] __alloc_skb+0xed/0x420 [ 1994.949505][ T9076] __ip_append_data+0x13cd/0x1dc0 [ 1994.954531][ T9076] ? raw_send_hdrinc+0xa60/0xa60 [ 1994.959476][ T9076] ? raw_send_hdrinc+0xa60/0xa60 [ 1994.964426][ T9076] ip_append_data+0x126/0x150 [ 1994.969179][ T9076] raw_sendmsg+0xa2e/0xc20 [ 1994.973668][ T9076] inet_sendmsg+0x5f/0x80 [ 1994.978221][ T9076] __sys_sendto+0x2a8/0x370 [ 1994.982772][ T9076] ? __cond_resched+0x11/0x40 [ 1994.987562][ T9076] ? fput+0x2d/0x130 [ 1994.991489][ T9076] __x64_sys_sendto+0x74/0x90 [ 1994.996167][ T9076] do_syscall_64+0x3d/0x90 [ 1995.000580][ T9076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1995.006570][ T9076] RIP: 0033:0x4665e9 [ 1995.010458][ T9076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1995.030151][ T9076] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1995.038557][ T9076] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1995.046538][ T9076] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1995.054507][ T9076] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1995.062468][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 11:16:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}}, 0x801) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x9, {{0x2, 0x4e20, @loopback}}}, 0x88) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x50240, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10) [ 1995.070446][ T9076] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:16:04 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xfeffffff}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:04 executing program 3 (fault-call:14 fault-nth:58): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:16:04 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0104800000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1995.317654][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 1995.317681][ C0] sd 0:0:1:0: [sg0] tag#517 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1995.334582][ C0] sd 0:0:1:0: [sg0] tag#517 CDB: opcode=0xe5 (vendor) [ 1995.341341][ C0] sd 0:0:1:0: [sg0] tag#517 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1995.350828][ C0] sd 0:0:1:0: [sg0] tag#517 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1995.360295][ C0] sd 0:0:1:0: [sg0] tag#517 CDB[20]: ba 11:16:04 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101cc3, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/125) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:04 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x700000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004eac0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x40, "5080dc634f267f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000180)={r2, 0x0, "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", "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"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1995.645840][ C0] sd 0:0:1:0: [sg0] tag#518 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1995.656142][ C0] sd 0:0:1:0: [sg0] tag#518 CDB: opcode=0xe5 (vendor) [ 1995.662919][ C0] sd 0:0:1:0: [sg0] tag#518 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1995.672396][ C0] sd 0:0:1:0: [sg0] tag#518 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1995.681957][ C0] sd 0:0:1:0: [sg0] tag#518 CDB[20]: ba [ 1995.687553][ C0] sd 0:0:1:0: [sg0] tag#519 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1995.697817][ C0] sd 0:0:1:0: [sg0] tag#519 CDB: opcode=0xe5 (vendor) [ 1995.704594][ C0] sd 0:0:1:0: [sg0] tag#519 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1995.714043][ C0] sd 0:0:1:0: [sg0] tag#519 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1995.723568][ C0] sd 0:0:1:0: [sg0] tag#519 CDB[20]: ba [ 1995.829180][ T9155] FAULT_INJECTION: forcing a failure. [ 1995.829180][ T9155] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.841817][ T9155] CPU: 1 PID: 9155 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1995.852148][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1995.862316][ T9155] Call Trace: [ 1995.865603][ T9155] dump_stack_lvl+0xb7/0x103 [ 1995.870189][ T9155] dump_stack+0x11/0x1a [ 1995.874386][ T9155] should_fail+0x23c/0x250 [ 1995.878807][ T9155] __should_failslab+0x81/0x90 [ 1995.883579][ T9155] should_failslab+0x5/0x20 [ 1995.888089][ T9155] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1995.893853][ T9155] ? __kmalloc_node_track_caller+0x30/0x40 [ 1995.899797][ T9155] __kmalloc_node_track_caller+0x30/0x40 [ 1995.905458][ T9155] ? __ip_append_data+0x13cd/0x1dc0 [ 1995.910725][ T9155] __alloc_skb+0x187/0x420 [ 1995.915151][ T9155] __ip_append_data+0x13cd/0x1dc0 [ 1995.920292][ T9155] ? raw_send_hdrinc+0xa60/0xa60 [ 1995.925236][ T9155] ? raw_send_hdrinc+0xa60/0xa60 [ 1995.930185][ T9155] ip_append_data+0x126/0x150 [ 1995.934877][ T9155] raw_sendmsg+0xa2e/0xc20 [ 1995.939320][ T9155] inet_sendmsg+0x5f/0x80 [ 1995.943677][ T9155] __sys_sendto+0x2a8/0x370 [ 1995.948181][ T9155] ? __cond_resched+0x11/0x40 [ 1995.952919][ T9155] ? fput+0x2d/0x130 [ 1995.956819][ T9155] __x64_sys_sendto+0x74/0x90 [ 1995.961502][ T9155] do_syscall_64+0x3d/0x90 [ 1995.965924][ T9155] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1995.971874][ T9155] RIP: 0033:0x4665e9 [ 1995.975758][ T9155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1995.995819][ T9155] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1996.004527][ T9155] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1996.012494][ T9155] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1996.020640][ T9155] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1996.028950][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1996.036993][ T9155] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:16:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:05 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a01fffe0000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:05 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:05 executing program 3 (fault-call:14 fault-nth:59): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:16:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xffffff97}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 1996.339611][ C0] sd 0:0:1:0: [sg0] tag#520 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1996.350078][ C0] sd 0:0:1:0: [sg0] tag#520 CDB: opcode=0xe5 (vendor) [ 1996.356844][ C0] sd 0:0:1:0: [sg0] tag#520 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1996.366324][ C0] sd 0:0:1:0: [sg0] tag#520 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1996.375910][ C0] sd 0:0:1:0: [sg0] tag#520 CDB[20]: ba 11:16:05 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1996.655554][ C0] sd 0:0:1:0: [sg0] tag#521 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1996.665829][ C0] sd 0:0:1:0: [sg0] tag#521 CDB: opcode=0xe5 (vendor) [ 1996.672574][ C0] sd 0:0:1:0: [sg0] tag#521 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1996.682051][ C0] sd 0:0:1:0: [sg0] tag#521 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1996.692309][ C0] sd 0:0:1:0: [sg0] tag#521 CDB[20]: ba 11:16:05 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x21dd, 0x0, 0x8514}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:05 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a01feff0000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 1996.960937][ C0] sd 0:0:1:0: [sg0] tag#522 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1996.971209][ C0] sd 0:0:1:0: [sg0] tag#522 CDB: opcode=0xe5 (vendor) [ 1996.978166][ C0] sd 0:0:1:0: [sg0] tag#522 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1996.987645][ C0] sd 0:0:1:0: [sg0] tag#522 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1996.992290][ T9207] FAULT_INJECTION: forcing a failure. [ 1996.992290][ T9207] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.997315][ C0] sd 0:0:1:0: [sg0] tag#522 CDB[20]: ba [ 1997.010435][ T9207] CPU: 1 PID: 9207 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1997.025990][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.036045][ T9207] Call Trace: [ 1997.039757][ T9207] dump_stack_lvl+0xb7/0x103 [ 1997.044345][ T9207] dump_stack+0x11/0x1a [ 1997.048603][ T9207] should_fail+0x23c/0x250 [ 1997.053018][ T9207] __should_failslab+0x81/0x90 [ 1997.058046][ T9207] should_failslab+0x5/0x20 [ 1997.062690][ T9207] kmem_cache_alloc_node+0x58/0x2b0 [ 1997.068107][ T9207] ? ip_generic_getfrag+0x14a/0x1b0 [ 1997.073602][ T9207] ? __alloc_skb+0xed/0x420 [ 1997.078111][ T9207] __alloc_skb+0xed/0x420 [ 1997.082527][ T9207] __ip_append_data+0x13cd/0x1dc0 [ 1997.087661][ T9207] ? raw_send_hdrinc+0xa60/0xa60 [ 1997.092655][ T9207] ? raw_send_hdrinc+0xa60/0xa60 [ 1997.097628][ T9207] ip_append_data+0x126/0x150 [ 1997.102373][ T9207] raw_sendmsg+0xa2e/0xc20 [ 1997.106795][ T9207] inet_sendmsg+0x5f/0x80 [ 1997.111126][ T9207] __sys_sendto+0x2a8/0x370 [ 1997.115645][ T9207] ? __cond_resched+0x11/0x40 [ 1997.120499][ T9207] ? fput+0x2d/0x130 [ 1997.124464][ T9207] __x64_sys_sendto+0x74/0x90 [ 1997.129172][ T9207] do_syscall_64+0x3d/0x90 [ 1997.133579][ T9207] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1997.139550][ T9207] RIP: 0033:0x4665e9 [ 1997.143440][ T9207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1997.163630][ T9207] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1997.172207][ T9207] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 1997.180167][ T9207] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1997.188223][ T9207] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1997.196454][ T9207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1997.204674][ T9207] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:16:06 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="c1760ad87d3b9600a99cb77d92646e3511d9cb2a28671ff562bbc3d97448f23b8100304498cad996b324433cec91697c1b81c14bdfa48312b8fcf41e1c0c0026a708b076", 0x44}, {&(0x7f0000000080)="467815c80073a53527ae65a5b4d920c0a44efd8498ec2cc1282953a322681b0b2a8725f8ac444e", 0x27}, {&(0x7f0000000180)="d7e263281a4b8e90fdd4699cad3ff851fd23680bddbcb0583d07949b1e8e8c9e67eb21d112c92c0c2ee7130fc0ef8036282dbb521ce4f13a9efb7e3f61b81543691bb920ff904c34a3b90bf84102e7457149f64dda4208d9ca50dfbe", 0x5c}, {&(0x7f0000000200)="5acd1058a4a6e216f87b988459deecb0e47fe6c1bdd37e568b3c65c2cf87b559bf0f7b3a18abbe538d99864be6622f5d50aef5c98c89dc04addc42ab0b4daacaf4b712093b3a856173475e89b1924c17fdd62ea04bdc4d0d05f721cf9e0894197b0f0f10fbdcbd58bca936713f510afff87060da62dc93810cad6e97d6e05aadb5ea1a3126b2f9fd5282dfcf7fa3702754f83373bf8fe768eec81525b96819afd6445ee1bf3a2009f0934b2d0e7e0a550880e2e33ea17e6264f116f10780d4772e0f972df2174065100cb5f5604a454e5ebb99b1e877", 0xd6}], 0x4, &(0x7f0000000340)=[{0x60, 0x10b, 0x1, "d3faf0bc6b87d506abd8f9564e261734c6ae21054a2e5d07acd3be2203d210e483583e7dba17623410e0c9eb74a22c64b2d195c9bbb3059c1b04fcae169b7567e702585c32d19fc580be"}, {0xa0, 0x1, 0x8, "cccec4fae2ceccfd3571090fd15792b7a4a616a772f38ca67036fa08ca49421516b03d9eed6b773cd74c27058c32a2238a84c3b33b83499694e77601bb8348d48853b218390b48b75a9395abb3b547a154af01d6478836241c24c0c3986cbdb3a39a09007134eed9810120225bdade854924b1a18a6eaca49ab00689f6ac99d1d32d33cf38bf78fa25d7cacb"}, {0xb8, 0x105, 0x1000, "7b80df867fd0195eb87ad80d299b9672f4b3036f73d1a81cb54cb3369fd5998bb14c6a6fb3ef061a439080814afac76eb325097a5ce1fab0954702c6a35912b77300f678f06114eed5f81ff7d02f6f5589db8e4e36c59ac2d6ea9b18acdbf37de53fc831b904e64a97d1cc1e04e277e8ca6700b5cd153afdc16f88d0f224d1b442a6ba005dac999b906ef7f6667d3c63003e4752ac712b590d9248c2f7cc5828215633e8c25f"}, {0xb8, 0x84, 0x1, "63b11a66429b6122d9fdfe9b3aa60808885e383d914c4f30f2ade194320019d337c9fed3f21e27eaf893b1048105d75830c06d3728ec8a404681409202c51faabf1784d269f28d7c64a40f89c978f39638a42e9e1b43c0e4cef0e61358b65c669a10ad31ca17b03a5aa88dcd0bbec7ece7772f03b8110a7e62d8ef07ef4861f6aa4c2eed0f0f0bd6dcad90c8041c773308ecb9fd5f5d15875ef3ce232e8ae58397236b07"}, {0x1010, 0x11e, 0x5, "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"}, {0x60, 0x105, 0x7ff, "d8159ad243c34855e6b2ced9e009fc87e044ec50e0b87345ec1a90d8dbb6825d577219c4366305e3d1cedd2b954ea5cc8a47443defb3565f5acef373135677ca30564bcb684ccf275909eec3"}, {0xe0, 0x115, 0xff, "d88100704c792a83452d3a76b6dd30c564efdb32936c1ae32fdd1e785afbfde6dc8f916d6909ee67b63325dc6c4ec573c9d078ec0855b691fadf84584c36e1fe5e84833e1f034adb83a97212356ff59a14fd7c4477a2bbd7902a67395ea6f39c8cad5b3b702035941ca10a90085bf23e46fe390a6f104e625e346399de99fbe54b68e6a5d60811691a0e782b33c8d831a2c6c41f3e6c7086c20215f8faa97612511ce464a4c9df5469f6d246d6c4d0718d01fa86eb12c72ea7337c8d9a5136d4409fcf077ba7c174eca14fd404c8b9"}, {0x60, 0x118, 0x45de, "cc56aad97cf353aa47b69d38d2b088cd331a7751c725b07d6b5f52c69df3710eec0918a46a41a6345f834ef260c8b72ecc02d44dbeca5bea05dc92ea93f0a36fd5511c40e3717234de4655"}], 0x1420}, 0x4008810) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:06 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000800000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1997.388247][ C0] sd 0:0:1:0: [sg0] tag#523 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1997.398671][ C0] sd 0:0:1:0: [sg0] tag#523 CDB: opcode=0xe5 (vendor) [ 1997.405577][ C0] sd 0:0:1:0: [sg0] tag#523 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1997.415184][ C0] sd 0:0:1:0: [sg0] tag#523 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1997.424733][ C0] sd 0:0:1:0: [sg0] tag#523 CDB[20]: ba 11:16:06 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x5, 0x8cb, 0x97b, 0x10001, 0x13, "ba0b6eae9f46c45959935cceb11ae37cfe0c84"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x8f01, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xfffffffe}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:06 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x737c0000) 11:16:06 executing program 3 (fault-call:14 fault-nth:60): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:16:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) syz_open_pts(r0, 0x101400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x300401, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:06 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0140000800000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 1997.701037][ C0] sd 0:0:1:0: [sg0] tag#524 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1997.711594][ C0] sd 0:0:1:0: [sg0] tag#524 CDB: opcode=0xe5 (vendor) [ 1997.718556][ C0] sd 0:0:1:0: [sg0] tag#524 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1997.728233][ C0] sd 0:0:1:0: [sg0] tag#524 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1997.737693][ C0] sd 0:0:1:0: [sg0] tag#524 CDB[20]: ba [ 1997.785547][ T9248] FAULT_INJECTION: forcing a failure. [ 1997.785547][ T9248] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.798350][ T9248] CPU: 1 PID: 9248 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1997.808768][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.819275][ T9248] Call Trace: [ 1997.822545][ T9248] dump_stack_lvl+0xb7/0x103 [ 1997.827142][ T9248] dump_stack+0x11/0x1a [ 1997.831290][ T9248] should_fail+0x23c/0x250 [ 1997.835791][ T9248] __should_failslab+0x81/0x90 [ 1997.840609][ T9248] should_failslab+0x5/0x20 [ 1997.845123][ T9248] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 1997.850913][ T9248] ? __kmalloc_node_track_caller+0x30/0x40 [ 1997.856913][ T9248] __kmalloc_node_track_caller+0x30/0x40 [ 1997.862550][ T9248] ? __ip_append_data+0x13cd/0x1dc0 [ 1997.867744][ T9248] __alloc_skb+0x187/0x420 [ 1997.872185][ T9248] __ip_append_data+0x13cd/0x1dc0 [ 1997.877309][ T9248] ? raw_send_hdrinc+0xa60/0xa60 [ 1997.882306][ T9248] ? raw_send_hdrinc+0xa60/0xa60 [ 1997.887425][ T9248] ip_append_data+0x126/0x150 [ 1997.892104][ T9248] raw_sendmsg+0xa2e/0xc20 [ 1997.896515][ T9248] inet_sendmsg+0x5f/0x80 [ 1997.900924][ T9248] __sys_sendto+0x2a8/0x370 [ 1997.905456][ T9248] ? __cond_resched+0x11/0x40 [ 1997.910125][ T9248] ? fput+0x2d/0x130 [ 1997.914011][ T9248] __x64_sys_sendto+0x74/0x90 [ 1997.918680][ T9248] do_syscall_64+0x3d/0x90 [ 1997.923084][ T9248] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1997.928968][ T9248] RIP: 0033:0x4665e9 [ 1997.932849][ T9248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1997.952447][ T9248] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1997.961315][ T9248] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1997.969607][ T9248] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1997.977567][ T9248] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1997.985566][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1997.993519][ T9248] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:16:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@multicast1, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@remote}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008844) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x90c, 0x37}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4004044) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x55}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x20048000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000440)={{0x2, 0x4e23, @multicast1}, {0x1, @local}, 0x0, {0x2, 0x4e23, @remote}, 'batadv_slave_0\x00'}) [ 1998.382391][ C0] sd 0:0:1:0: [sg0] tag#528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1998.392956][ C0] sd 0:0:1:0: [sg0] tag#528 CDB: opcode=0xe5 (vendor) [ 1998.399744][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1998.409240][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1998.418717][ C0] sd 0:0:1:0: [sg0] tag#528 CDB[20]: ba 11:16:07 executing program 3 (fault-call:14 fault-nth:61): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:16:07 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x8, 0x4, 0x8, 0x5, 0x1, "968c215433591b3c95028873fa9dc2b7c3a2c4"}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1998.676681][ C0] sd 0:0:1:0: [sg0] tag#529 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1998.686962][ C0] sd 0:0:1:0: [sg0] tag#529 CDB: opcode=0xe5 (vendor) [ 1998.693818][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1998.703294][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1998.712856][ C0] sd 0:0:1:0: [sg0] tag#529 CDB[20]: ba 11:16:07 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100002000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:07 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x121640, 0x92) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffb, 0xfe, 0xb1, @scatter={0x9, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f0000002980)=""/240, 0xf0}, {&(0x7f0000000380)=""/62, 0x3e}, {&(0x7f00000015c0)=""/74, 0x4a}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/175, 0xaf}, {&(0x7f0000002700)=""/136, 0x88}, {&(0x7f00000027c0)=""/215, 0xd7}]}, &(0x7f0000000400)="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", &(0x7f0000000500)=""/4096, 0x8, 0x10004, 0x0, &(0x7f0000001500)}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) clock_gettime(0x0, &(0x7f0000006880)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000067c0)=[{{&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001540)=""/106, 0x6a}, {&(0x7f00000003c0)=""/17, 0x11}], 0x2, &(0x7f0000002ac0)=""/111, 0x6f}, 0x6}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000002b40)=""/240, 0xf0}, {&(0x7f0000002c40)=""/103, 0x67}, {&(0x7f0000002cc0)=""/223, 0xdf}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/133, 0x85}, {&(0x7f0000004e80)=""/192, 0xc0}, {&(0x7f0000004f40)=""/5, 0x5}], 0x8, &(0x7f0000005000)=""/174, 0xae}, 0x4}, {{&(0x7f00000050c0)=@can, 0x80, &(0x7f0000006700)=[{&(0x7f0000005140)=""/172, 0xac}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/93, 0x5d}, {&(0x7f0000006280)=""/210, 0xd2}, {&(0x7f0000006380)=""/77, 0x4d}, {&(0x7f0000006400)=""/24, 0x18}, {&(0x7f0000006440)=""/129, 0x81}, {&(0x7f0000006500)=""/151, 0x97}, {&(0x7f00000065c0)=""/149, 0x95}, {&(0x7f0000006680)=""/108, 0x6c}], 0xa}, 0x40}], 0x3, 0x10002, &(0x7f00000068c0)={r2, r3+10000000}) recvmmsg$unix(r0, &(0x7f000000a580)=[{{0x0, 0x0, &(0x7f0000007d40)=[{&(0x7f0000006900)=""/171, 0xab}, {&(0x7f00000069c0)=""/4096, 0x1000}, {&(0x7f00000079c0)=""/38, 0x26}, {&(0x7f0000007a00)=""/254, 0xfe}, {&(0x7f0000007b00)=""/208, 0xd0}, {&(0x7f0000007c00)=""/51, 0x33}, {&(0x7f0000007c40)=""/207, 0xcf}], 0x7, &(0x7f0000007dc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000007e00)=@abs, 0x6e, &(0x7f0000008280)=[{&(0x7f0000007e80)=""/219, 0xdb}, {&(0x7f0000007f80)=""/9, 0x9}, {&(0x7f0000007fc0)=""/142, 0x8e}, {&(0x7f0000008080)=""/206, 0xce}, {&(0x7f0000008180)=""/210, 0xd2}], 0x5, &(0x7f0000008300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000008380)=@abs, 0x6e, &(0x7f0000008540)=[{&(0x7f0000008400)=""/95, 0x5f}, {&(0x7f0000008480)=""/57, 0x39}, {&(0x7f00000084c0)=""/124, 0x7c}], 0x3, &(0x7f0000008580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000008640)=@abs, 0x6e, &(0x7f0000009900)=[{&(0x7f00000086c0)=""/178, 0xb2}, {&(0x7f0000008780)=""/4096, 0x1000}, {&(0x7f0000009780)=""/146, 0x92}, {&(0x7f0000009840)=""/189, 0xbd}], 0x4, &(0x7f0000009940)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000009a40), 0x6e, &(0x7f0000009c00)=[{&(0x7f0000009ac0)=""/66, 0x42}, {&(0x7f0000009b40)=""/145, 0x91}], 0x2, &(0x7f0000009c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000009d00)=@abs, 0x6e, &(0x7f000000a380)=[{&(0x7f0000009d80)=""/198, 0xc6}, {&(0x7f0000009e80)=""/242, 0xf2}, {&(0x7f0000009f80)=""/62, 0x3e}, {&(0x7f0000009fc0)=""/129, 0x81}, {&(0x7f000000a080)=""/26, 0x1a}, {&(0x7f000000a0c0)=""/130, 0x82}, {&(0x7f000000a180)=""/250, 0xfa}, {&(0x7f000000a280)=""/189, 0xbd}, {&(0x7f000000a340)=""/20, 0x14}], 0x9, &(0x7f000000a440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x6, 0xe8db48ff1ff8cbb3, &(0x7f000000a700)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 1999.050194][ T9285] FAULT_INJECTION: forcing a failure. [ 1999.050194][ T9285] name failslab, interval 1, probability 0, space 0, times 0 [ 1999.062870][ T9285] CPU: 1 PID: 9285 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 1999.072933][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1999.082984][ T9285] Call Trace: [ 1999.086263][ T9285] dump_stack_lvl+0xb7/0x103 [ 1999.090865][ T9285] dump_stack+0x11/0x1a [ 1999.095017][ T9285] should_fail+0x23c/0x250 [ 1999.099931][ T9285] __should_failslab+0x81/0x90 [ 1999.104916][ T9285] should_failslab+0x5/0x20 [ 1999.109490][ T9285] kmem_cache_alloc_node+0x58/0x2b0 [ 1999.114688][ T9285] ? ip_generic_getfrag+0x14a/0x1b0 [ 1999.119912][ T9285] ? __alloc_skb+0xed/0x420 [ 1999.124499][ T9285] __alloc_skb+0xed/0x420 [ 1999.129170][ T9285] __ip_append_data+0x13cd/0x1dc0 [ 1999.134215][ T9285] ? raw_send_hdrinc+0xa60/0xa60 [ 1999.139151][ T9285] ? raw_send_hdrinc+0xa60/0xa60 [ 1999.144238][ T9285] ip_append_data+0x126/0x150 [ 1999.148937][ T9285] raw_sendmsg+0xa2e/0xc20 [ 1999.153709][ T9285] inet_sendmsg+0x5f/0x80 [ 1999.158033][ T9285] __sys_sendto+0x2a8/0x370 [ 1999.162545][ T9285] ? __cond_resched+0x11/0x40 [ 1999.167230][ T9285] ? fput+0x2d/0x130 [ 1999.171187][ T9285] __x64_sys_sendto+0x74/0x90 [ 1999.176042][ T9285] do_syscall_64+0x3d/0x90 [ 1999.180484][ T9285] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1999.186378][ T9285] RIP: 0033:0x4665e9 [ 1999.190270][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1999.209965][ T9285] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1999.218491][ T9285] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 1999.226544][ T9285] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 1999.235827][ T9285] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 1999.243887][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1999.252050][ T9285] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:16:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x200001d0) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:08 executing program 4: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:08 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = gettid() tkill(r0, 0x34) perf_event_open(0x0, r0, 0x9, 0xffffffffffffffff, 0x8) r1 = clone3(&(0x7f0000000340)={0x28000400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180), {0x2}, &(0x7f00000001c0)=""/38, 0x26, &(0x7f0000000200)=""/235, &(0x7f0000000300)=[r0], 0x1}, 0x58) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) tkill(r0, 0x20) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:08 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000001000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:08 executing program 3 (fault-call:14 fault-nth:62): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:16:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:08 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x400, 0x3, 0x4, 0xae8, 0x14, "28ba425761982ac0"}) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/202, 0xca}], 0x6, 0x2, 0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:08 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x4e20, @multicast2}}}, 0x88) 11:16:08 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000002000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffefffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:09 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:09 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) [ 2000.167982][ T9344] FAULT_INJECTION: forcing a failure. [ 2000.167982][ T9344] name failslab, interval 1, probability 0, space 0, times 0 [ 2000.180819][ T9344] CPU: 1 PID: 9344 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 2000.190885][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2000.201015][ T9344] Call Trace: [ 2000.204392][ T9344] dump_stack_lvl+0xb7/0x103 [ 2000.208980][ T9344] dump_stack+0x11/0x1a [ 2000.213136][ T9344] should_fail+0x23c/0x250 [ 2000.217559][ T9344] __should_failslab+0x81/0x90 [ 2000.222317][ T9344] should_failslab+0x5/0x20 [ 2000.226810][ T9344] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 2000.232665][ T9344] ? __kmalloc_node_track_caller+0x30/0x40 [ 2000.238983][ T9344] __kmalloc_node_track_caller+0x30/0x40 [ 2000.244765][ T9344] ? __ip_append_data+0x13cd/0x1dc0 [ 2000.249947][ T9344] __alloc_skb+0x187/0x420 [ 2000.254366][ T9344] __ip_append_data+0x13cd/0x1dc0 [ 2000.259388][ T9344] ? raw_send_hdrinc+0xa60/0xa60 [ 2000.264574][ T9344] ? raw_send_hdrinc+0xa60/0xa60 [ 2000.269681][ T9344] ip_append_data+0x126/0x150 [ 2000.274673][ T9344] raw_sendmsg+0xa2e/0xc20 [ 2000.279691][ T9344] inet_sendmsg+0x5f/0x80 [ 2000.284094][ T9344] __sys_sendto+0x2a8/0x370 [ 2000.288675][ T9344] ? __cond_resched+0x11/0x40 [ 2000.293356][ T9344] ? fput+0x2d/0x130 [ 2000.297423][ T9344] __x64_sys_sendto+0x74/0x90 [ 2000.302086][ T9344] do_syscall_64+0x3d/0x90 [ 2000.306488][ T9344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2000.312561][ T9344] RIP: 0033:0x4665e9 [ 2000.316441][ T9344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2000.336537][ T9344] RSP: 002b:00007f3a7e58b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2000.345163][ T9344] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2000.353750][ T9344] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 2000.361717][ T9344] RBP: 00007f3a7e58b1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 2000.369674][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2000.377693][ T9344] R13: 00007ffc7445e3af R14: 00007f3a7e58b300 R15: 0000000000022000 11:16:09 executing program 3 (fault-call:14 fault-nth:63): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:16:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:09 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000402000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 2000.985001][ C0] scsi_io_completion_action: 6 callbacks suppressed [ 2000.985021][ C0] sd 0:0:1:0: [sg0] tag#537 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2001.002337][ C0] sd 0:0:1:0: [sg0] tag#537 CDB: opcode=0xe5 (vendor) [ 2001.009329][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2001.018826][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2001.028581][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[20]: ba [ 2001.374369][ C0] sd 0:0:1:0: [sg0] tag#538 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2001.384751][ C0] sd 0:0:1:0: [sg0] tag#538 CDB: opcode=0xe5 (vendor) [ 2001.391685][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2001.401238][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2001.410832][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[20]: ba [ 2001.563667][ T9396] FAULT_INJECTION: forcing a failure. [ 2001.563667][ T9396] name failslab, interval 1, probability 0, space 0, times 0 [ 2001.576387][ T9396] CPU: 1 PID: 9396 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 2001.586647][ T9396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2001.596735][ T9396] Call Trace: [ 2001.600207][ T9396] dump_stack_lvl+0xb7/0x103 [ 2001.604905][ T9396] dump_stack+0x11/0x1a [ 2001.609148][ T9396] should_fail+0x23c/0x250 11:16:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x752b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 2001.613598][ T9396] __should_failslab+0x81/0x90 [ 2001.618386][ T9396] should_failslab+0x5/0x20 [ 2001.622901][ T9396] kmem_cache_alloc_node+0x58/0x2b0 [ 2001.628156][ T9396] ? ip_generic_getfrag+0x14a/0x1b0 [ 2001.634296][ T9396] ? __alloc_skb+0xed/0x420 [ 2001.638821][ T9396] __alloc_skb+0xed/0x420 [ 2001.643160][ T9396] __ip_append_data+0x13cd/0x1dc0 [ 2001.648187][ T9396] ? raw_send_hdrinc+0xa60/0xa60 [ 2001.653130][ T9396] ? raw_send_hdrinc+0xa60/0xa60 [ 2001.658135][ T9396] ip_append_data+0x126/0x150 11:16:10 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) perf_event_open(0x0, 0x0, 0xd, r1, 0xa) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000180)="80d720f04fe1c03a9a18fb5e005b082516d5dff4bdb7526e6ff1f10f9cdd57dd6220ba19de6819622737b918d3f15239b97b5d898637ce46ee0bb2425bc96b1ae9f475a7f7cdd365f1204c5fa8239c3d68e88e5c4a26b964453f10b113be2cc352f64d8ca8f93a0b4edf6b43b6dff94c929ad864ab476feb20682fc4e26b698bd1c114f518ebb4b7f7683ea20098a483ad7f2ca4c2b2d2130f63688ef3cc8783fa03accb7ba05cda8b2758dcdb046eee6ed182dbaa52e11ba7", 0xb9) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x102000) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x100, 0x1, 0x9, "abd3f33851baa27f607c5792e32f679847511c", 0x22, 0x6}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 2001.662816][ T9396] raw_sendmsg+0xa2e/0xc20 [ 2001.667325][ T9396] inet_sendmsg+0x5f/0x80 [ 2001.671651][ T9396] __sys_sendto+0x2a8/0x370 [ 2001.676255][ T9396] ? __cond_resched+0x11/0x40 [ 2001.680932][ T9396] ? fput+0x2d/0x130 [ 2001.684830][ T9396] __x64_sys_sendto+0x74/0x90 [ 2001.689510][ T9396] do_syscall_64+0x3d/0x90 [ 2001.693932][ T9396] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2001.700093][ T9396] RIP: 0033:0x4665e9 [ 2001.704184][ T9396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2001.724338][ T9396] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2001.732890][ T9396] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2001.741136][ T9396] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 2001.749150][ T9396] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 11:16:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 2001.757434][ T9396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2001.765690][ T9396] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:16:10 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000003000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:10 executing program 3 (fault-call:14 fault-nth:64): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 2001.890527][ C0] sd 0:0:1:0: [sg0] tag#541 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2001.900831][ C0] sd 0:0:1:0: [sg0] tag#541 CDB: opcode=0xe5 (vendor) [ 2001.907610][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2001.917102][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2001.926830][ C0] sd 0:0:1:0: [sg0] tag#541 CDB[20]: ba [ 2002.103976][ C0] sd 0:0:1:0: [sg0] tag#542 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2002.114243][ C0] sd 0:0:1:0: [sg0] tag#542 CDB: opcode=0xe5 (vendor) [ 2002.121086][ C0] sd 0:0:1:0: [sg0] tag#542 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2002.130813][ C0] sd 0:0:1:0: [sg0] tag#542 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2002.140282][ C0] sd 0:0:1:0: [sg0] tag#542 CDB[20]: ba 11:16:11 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000004000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 2002.452125][ C0] sd 0:0:1:0: [sg0] tag#545 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2002.462463][ C0] sd 0:0:1:0: [sg0] tag#545 CDB: opcode=0xe5 (vendor) [ 2002.469336][ C0] sd 0:0:1:0: [sg0] tag#545 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2002.478816][ C0] sd 0:0:1:0: [sg0] tag#545 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2002.488475][ C0] sd 0:0:1:0: [sg0] tag#545 CDB[20]: ba 11:16:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:11 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="d184ec0282580127a7b64899477272264e31653d379eced8cc658e0516dead134a2b5f6d1f") socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 2002.854952][ C0] sd 0:0:1:0: [sg0] tag#546 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2002.865330][ C0] sd 0:0:1:0: [sg0] tag#546 CDB: opcode=0xe5 (vendor) [ 2002.872100][ C0] sd 0:0:1:0: [sg0] tag#546 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2002.881588][ C0] sd 0:0:1:0: [sg0] tag#546 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2002.891079][ C0] sd 0:0:1:0: [sg0] tag#546 CDB[20]: ba 11:16:11 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000005000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 2002.934806][ T9430] FAULT_INJECTION: forcing a failure. [ 2002.934806][ T9430] name failslab, interval 1, probability 0, space 0, times 0 [ 2002.947517][ T9430] CPU: 1 PID: 9430 Comm: syz-executor.3 Tainted: G W 5.14.0-rc5-syzkaller #0 [ 2002.957661][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2002.967720][ T9430] Call Trace: [ 2002.971039][ T9430] dump_stack_lvl+0xb7/0x103 [ 2002.975701][ T9430] dump_stack+0x11/0x1a [ 2002.979891][ T9430] should_fail+0x23c/0x250 [ 2002.984307][ T9430] __should_failslab+0x81/0x90 [ 2002.989060][ T9430] should_failslab+0x5/0x20 [ 2002.993554][ T9430] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 2002.999294][ T9430] ? __kmalloc_node_track_caller+0x30/0x40 [ 2003.005105][ T9430] __kmalloc_node_track_caller+0x30/0x40 [ 2003.010767][ T9430] ? __ip_append_data+0x13cd/0x1dc0 [ 2003.015961][ T9430] __alloc_skb+0x187/0x420 [ 2003.020373][ T9430] __ip_append_data+0x13cd/0x1dc0 [ 2003.025390][ T9430] ? raw_send_hdrinc+0xa60/0xa60 [ 2003.030334][ T9430] ? raw_send_hdrinc+0xa60/0xa60 [ 2003.035271][ T9430] ip_append_data+0x126/0x150 [ 2003.040075][ T9430] raw_sendmsg+0xa2e/0xc20 [ 2003.044583][ T9430] inet_sendmsg+0x5f/0x80 [ 2003.048920][ T9430] __sys_sendto+0x2a8/0x370 [ 2003.053623][ T9430] ? __cond_resched+0x11/0x40 [ 2003.058360][ T9430] ? fput+0x2d/0x130 [ 2003.062293][ T9430] __x64_sys_sendto+0x74/0x90 [ 2003.066976][ T9430] do_syscall_64+0x3d/0x90 [ 2003.071513][ T9430] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2003.077484][ T9430] RIP: 0033:0x4665e9 [ 2003.081375][ T9430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2003.100987][ T9430] RSP: 002b:00007f3a7e56a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2003.109691][ T9430] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2003.117756][ T9430] RDX: 000000000000fe7a RSI: 0000000020000080 RDI: 0000000000000004 [ 2003.125920][ T9430] RBP: 00007f3a7e56a1d0 R08: 00000000200001c0 R09: 0000000000000010 [ 2003.133960][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2003.142193][ T9430] R13: 00007ffc7445e3af R14: 00007f3a7e56a300 R15: 0000000000022000 11:16:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x400}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:12 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x11) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:12 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000006000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 2003.320324][ C0] sd 0:0:1:0: [sg0] tag#547 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2003.330621][ C0] sd 0:0:1:0: [sg0] tag#547 CDB: opcode=0xe5 (vendor) [ 2003.337421][ C0] sd 0:0:1:0: [sg0] tag#547 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2003.347004][ C0] sd 0:0:1:0: [sg0] tag#547 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2003.356489][ C0] sd 0:0:1:0: [sg0] tag#547 CDB[20]: ba 11:16:12 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) perf_event_open(0x0, r0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x9) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local, 0x0, 0x5, [@dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, @multicast1, @multicast2, @broadcast]}, 0x24) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:12 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000406000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 2003.546839][ C0] sd 0:0:1:0: [sg0] tag#548 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2003.557143][ C0] sd 0:0:1:0: [sg0] tag#548 CDB: opcode=0xe5 (vendor) [ 2003.564011][ C0] sd 0:0:1:0: [sg0] tag#548 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2003.574186][ C0] sd 0:0:1:0: [sg0] tag#548 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2003.583749][ C0] sd 0:0:1:0: [sg0] tag#548 CDB[20]: ba 11:16:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) [ 2003.782092][ C0] sd 0:0:1:0: [sg0] tag#550 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2003.792389][ C0] sd 0:0:1:0: [sg0] tag#550 CDB: opcode=0xe5 (vendor) [ 2003.799188][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2003.808685][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2003.818185][ C0] sd 0:0:1:0: [sg0] tag#550 CDB[20]: ba [ 2004.007526][ C0] sd 0:0:1:0: [sg0] tag#551 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2004.017878][ C0] sd 0:0:1:0: [sg0] tag#551 CDB: opcode=0xe5 (vendor) [ 2004.024933][ C0] sd 0:0:1:0: [sg0] tag#551 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2004.034507][ C0] sd 0:0:1:0: [sg0] tag#551 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2004.043989][ C0] sd 0:0:1:0: [sg0] tag#551 CDB[20]: ba 11:16:13 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 11:16:13 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000007000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:13 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002008d79d7681a81fb547b555e155c0033900000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, r1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffffa, 0x4b, 0xe, 0x3, &(0x7f0000000180)="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"}) socket$inet(0x2, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x8c) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x6ad4, &(0x7f0000000140)={0x0, 0x6bd5, 0x4, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8120}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:13 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x6, 0xfffffffd) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = signalfd4(r0, &(0x7f0000000080)={[0x7755]}, 0x8, 0x80000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='-\x00') setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, r1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000000)={0x5, 0x81, 0x2}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x7, 0x9, 0x6, 0x3, 0x0, 0xe94b, 0x105a, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff, 0x1, @perf_config_ext={0x5, 0x2}, 0x2, 0x3, 0x1000000, 0x8, 0x3, 0xffff, 0x3ff, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0xc, r5, 0x1) 11:16:13 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000008000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:13 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x181000, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:13 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x11, 0xffffffffffffffff, 0x8279000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0xfffffffa, {{0x2, 0x0, @private=0xa010100}}}, 0x88) 11:16:13 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100001008000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3c3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0xfffffffffffffffd, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:14 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x5b0, 0x0, &(0x7f00000001c0), 0x10) 11:16:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:14 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x20, 0x0, 0x6, 0x0, 0x5, 0x208, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x80, 0x8}, 0x4a908, 0x7fe, 0x5, 0x2, 0x6, 0x7, 0x800, 0x0, 0x1ff, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r0, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xc1, 0x7f, 0x3, 0x30, 0x0, 0x6d4, 0x10048, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7f}, 0x19004, 0x9, 0x200, 0x7, 0x8, 0x3, 0x5, 0x0, 0x7f, 0x0, 0x40}, 0x0, 0x7, r1, 0x9) creat(&(0x7f0000000000)='./file0\x00', 0x183) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:14 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000018000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:14 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x6, 0x9a, 0xd9, 0x0, 0x7, 0x0, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x240, 0x200, 0x1, 0x1, 0x9, 0x7f, 0x5, 0x0, 0xffff, 0x0, 0x4}, r2, 0x4, 0xffffffffffffffff, 0x9) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0xf61, 0x101, 0xb060, 0x3, 0x0, "227c883be945a5df"}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:14 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x5b4, 0x0, &(0x7f00000001c0), 0x10) 11:16:14 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a010000001c000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:14 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) 11:16:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:14 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x700000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004eac0)={0x100000000, [{0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, r3}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, r3}, {0x0, 0x0}, {}, {0x0}, {0x0}, {r1, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, r3}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {r1}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {r1, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, r3}, {0x0, 0x0}, {0x0, 0x0}], 0x40, "5080dc634f267f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000200)={r3, 0x0, "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", "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"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r199 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r199, 0xf502, 0x0) r200 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x404800, 0x0) ioctl$KDDELIO(r200, 0x4b35, 0x3ff) r201 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r201, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r200, 0xd000943e, &(0x7f0000057ac0)={0x0, r50, "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", "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"}) r203 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x700000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r203, 0x81f8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004eac0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r205}, {}, {}, {}, {}, {r204}, {}, {}, {}, {}, {}, {0x0, r205}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r187}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r117}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r204}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r115}], 0x40, "5080dc634f267f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r201, 0xd000943d, &(0x7f0000058ac0)={0x9, [{r76}, {r42, r132}, {r191, r117}, {0x0, r176}, {r11, r52}, {r68}, {}, {0x0, r57}, {}, {r198}, {r92, r153}, {r141}, {}, {r180, r122}, {r62}, {r4}, {r193}, {r5}, {r119}, {0x0, r58}, {}, {0x0, r56}, {r48, r82}, {}, {r45, r120}, {r155}, {0x0, r73}, {0x0, r81}, {0x0, r46}, {}, {0x0, r142}, {r27, r16}, {r74, r183}, {r166, r152}, {0x0, r103}, {r169, r77}, {r102}, {r112, r109}, {r97}, {r129, r149}, {}, {r159, r75}, {}, {r23}, {0x0, r21}, {}, {}, {}, {r15}, {r61}, {0x0, r125}, {r184}, {r59}, {}, {}, {r55}, {r44}, {0x0, r38}, {0x0, r69}, {r2, r43}, {}, {r135}, {}, {}, {r68, r154}, {0x0, r6}, {r108}, {r182}, {r90, r54}, {r156}, {r133}, {0x0, r78}, {r121, r197}, {r8}, {}, {}, {0x0, r87}, {}, {}, {r113}, {0x0, r99}, {}, {r83, r175}, {}, {r184, r29}, {}, {0x0, r91}, {0x0, r25}, {r13}, {}, {}, {r11}, {r35, r145}, {r47}, {r171, r51}, {}, {0x0, r167}, {}, {}, {r143, r151}, {0x0, r14}, {}, {r193}, {0x0, r43}, {}, {0x0, r160}, {r12, r151}, {r144, r9}, {r49}, {r94}, {0x0, r123}, {}, {r161}, {0x0, r101}, {r131, r26}, {0x0, r192}, {}, {}, {}, {r4, r66}, {r17}, {r83}, {r194, r195}, {r150, r187}, {}, {0x0, r7}, {}, {r5}, {r59, r46}, {r133}, {0x0, r93}, {0x0, r126}, {0x0, r28}, {}, {0x0, r24}, {r50, r134}, {0x0, r40}, {}, {}, {r39}, {r80, r87}, {r116}, {r173, r53}, {}, {r114, r63}, {r35, r24}, {}, {}, {0x0, r22}, {}, {r96, r84}, {r92, r179}, {0x0, r72}, {}, {r164, r110}, {r174, r172}, {0x0, r65}, {r135, r136}, {r34}, {r31, r70}, {r32}, {r20}, {r4}, {0x0, r139}, {0x0, r145}, {0x0, r196}, {0x0, r140}, {r79}, {r127}, {}, {r32, r132}, {r168, r118}, {r95, r89}, {0x0, r195}, {}, {r27}, {}, {}, {}, {}, {r130}, {r61}, {0x0, r36}, {}, {r178, r77}, {0x0, r179}, {r124, r181}, {}, {r143, r170}, {r88}, {}, {0x0, r160}, {r147}, {}, {r190, r188}, {}, {r100, r52}, {r174}, {}, {r67}, {}, {r71, r157}, {}, {0x0, r98}, {}, {0x0, r19}, {r10, r163}, {0x0, r196}, {0x0, r30}, {r86}, {}, {r107}, {r13}, {r146}, {0x0, r165}, {0x0, r33}, {}, {r158}, {}, {r148}, {0x0, r185}, {}, {0x0, r162}, {r164, r60}, {r104, r85}, {}, {}, {}, {r41}, {r186, r105}, {r111}, {r37}, {r186, r189}, {r177, r128}, {r97}, {}, {}, {r18, r123}, {r64}, {0x0, r46}, {}, {}, {r137}, {r106}, {}, {r166}, {r94}, {0x0, r138}, {}, {}, {}, {}, {r68, r170}, {r202, r145}, {r204, r82}], 0x0, "6f6f898a7e54fa"}) sendto$inet(r201, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r201, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r201, 0x0, 0x2a, &(0x7f00000000c0)={0x8, {{0x2, 0x4e20, @multicast2}}}, 0x88) 11:16:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:14 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) fcntl$setstatus(r0, 0x4, 0x2000) 11:16:14 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000026000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:15 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xfd, 0x0, 0x7, 0xf9, 0x0, 0x4da, 0x8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8c, 0x2, @perf_config_ext={0x9e0, 0xffffffffffff0e78}, 0x41a00, 0x608c, 0x2, 0xc, 0xffff, 0x1ff, 0x2, 0x0, 0xfffffc00, 0x0, 0x7}, 0xffffffffffffffff, 0x5, r0, 0x1) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 2006.020726][ C0] scsi_io_completion_action: 9 callbacks suppressed [ 2006.020746][ C0] sd 0:0:1:0: [sg0] tag#574 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2006.037663][ C0] sd 0:0:1:0: [sg0] tag#574 CDB: opcode=0xe5 (vendor) [ 2006.044426][ C0] sd 0:0:1:0: [sg0] tag#574 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2006.054427][ C0] sd 0:0:1:0: [sg0] tag#574 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2006.063930][ C0] sd 0:0:1:0: [sg0] tag#574 CDB[20]: ba 11:16:15 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:15 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a010000003f000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 2006.328243][ C0] sd 0:0:1:0: [sg0] tag#575 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2006.338533][ C0] sd 0:0:1:0: [sg0] tag#575 CDB: opcode=0xe5 (vendor) [ 2006.345332][ C0] sd 0:0:1:0: [sg0] tag#575 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2006.354817][ C0] sd 0:0:1:0: [sg0] tag#575 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2006.364296][ C0] sd 0:0:1:0: [sg0] tag#575 CDB[20]: ba 11:16:15 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:15 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xb60, 0x0, &(0x7f00000001c0), 0x10) 11:16:15 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=')') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x841, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0xfda3, 0x40, 0x2, 0x5, 0x0, 0x0, 0x800000000000000, 0xa006, 0xb, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x418000000000, 0x60}, 0x80, 0x7fffffff, 0xda, 0x8, 0x2, 0x7, 0x8, 0x0, 0x7, 0x0, 0x5c}, r1, 0xfffffffffffffffd, r2, 0x9) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x8a65cce43614c57b, 0x1003, @fd, 0x2, &(0x7f0000000240)="ecd55cfb5255d819f158a7b9e14a8effa88460d2307db32c7524f7468c52555d40ddc3c7dabe6c847b1479935ac597d2a9c8570dc6472f21", 0x38, 0x10, 0x1, {0x0, r6}}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:15 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000040000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:15 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000001540)) preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/85, 0x55}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000001380)=""/187, 0xbb}, {&(0x7f0000001440)=""/61, 0x3d}], 0x9, 0x6, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:15 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x2, 0x0, 0x5, 0x0, 0xa4, &(0x7f0000000440)="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"}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x5, 0x3ff, 0x1, 0x100, 0x2, [0x7d5a00, 0x9, 0x8, 0x100]}) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00000000000000000000000000000002000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000009c5f8e3a6671eb1dc04d4ec360c33fa000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1be4f249ace616b0000e2ff0000000000000000000000000000000000000000000000000000000000000000000200"/681], 0x310) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x4, 0x7, 0x27f, 0x17}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:15 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) [ 2006.761796][ C0] sd 0:0:1:0: [sg0] tag#523 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2006.772090][ C0] sd 0:0:1:0: [sg0] tag#523 CDB: opcode=0xe5 (vendor) [ 2006.778877][ C0] sd 0:0:1:0: [sg0] tag#523 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2006.788351][ C0] sd 0:0:1:0: [sg0] tag#523 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2006.797827][ C0] sd 0:0:1:0: [sg0] tag#523 CDB[20]: ba 11:16:15 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000f5ffffffffffffff000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000100000000000000000000700000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000e2b5bb1900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002ccc000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff0000000000000000000000000000000000000000000000000000000000000000000200"/657], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/82) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) pwrite64(r3, &(0x7f0000000180)="a4600693eb76c96d9208047cbf2f6f99766f708ddf45c55c1de7e707b844df59488b8645246deb4652203e4210f2e7891ffc6232efff1265d7afc196976a5035cfaad15285af32c6783f5ba5631d3102f78635a80a53c808be7c442b23a46986a4a583aa9937508b915d", 0x6a, 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:15 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100080040000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:15 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x1, @multicast2}}}, 0x88) 11:16:15 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') perf_event_open(0x0, 0x0, 0xe, r0, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x10001}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:16 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) [ 2007.139279][ C0] sd 0:0:1:0: [sg0] tag#524 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2007.149576][ C0] sd 0:0:1:0: [sg0] tag#524 CDB: opcode=0xe5 (vendor) [ 2007.156366][ C0] sd 0:0:1:0: [sg0] tag#524 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2007.166462][ C0] sd 0:0:1:0: [sg0] tag#524 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2007.175978][ C0] sd 0:0:1:0: [sg0] tag#524 CDB[20]: ba 11:16:16 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x1110, 0x0, &(0x7f00000001c0), 0x10) 11:16:16 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000544000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:16 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000200)={{r1}, 0x0, 0x0, @inherit={0x78, &(0x7f0000001200)=ANY=[@ANYBLOB="0000000000000000000000000013000000000000000900000000000000345200000000000000800000100000008100000000143b547d000000000000000100000001000000800900ffffffffff01177809d444aa34d2000000000000005e000000000000000000000000000000000000007431df4487450e2e004917995243cef3b898e398476431d73304c064e91029216b36ee7a0903ae32ee7e4b18945a00000000000000"]}, @name="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"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}}}, 0x32) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0xff, 0x4}, {0x401, 0x5}, {0x1, 0x7ff}, {0x8561, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1000}, {0x793, 0x8}]}) 11:16:16 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x700000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004eac0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "5080dc634f267f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "931347fe29f99d"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{r5, 0x9, 0x8, 0x40, 0x0, 0x8, 0x4f17ede5, 0x9147, 0x2, 0x2, 0x7f, 0x0, 0xc3, 0xff, 0x7fff}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:16 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:16 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000480000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:16 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{0x0, 0x4, 0x4, 0x8, 0x80000001, 0xffffffffffffb53a, 0xb9, 0x1f, 0x2, 0x9, 0x7, 0x7, 0x7, 0x2, 0x2da}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001180)={0x0, r1, "9ab44154cff8edd509315720eaaeeb36807da868f98e43ccb735464b19decfabf2882f6a33e4c737861a7a0621b06cdb748fc12124272688bcc0a58befab68cd2d0cb6ddb33f8a510af6dc9fd512441746eec5324ecd60e90246d855634c2ecbbda0f6d6c0a6a78d991a333bd45de4e5c6a911598110cf0bcb9fb36cd6185e6616cb61f1a1c18e345b1fa31ac1d14aa858deaed84dcb37ad79ebf79875b57e810bcdfd564893a6617744b2b9f1cf528307a3fdc04f042a1b637b18d571cecfdb774d8844f69983ebbc82df6f5a8d39d5d3360e5c6b22a91bfacee5785e1ad3e4c1faec970a5bceebe741a7c6a3a498ec913ff91e295c56983236d2b9ca676ffc", "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"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:16 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 2007.638702][ C0] sd 0:0:1:0: [sg0] tag#525 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2007.649034][ C0] sd 0:0:1:0: [sg0] tag#525 CDB: opcode=0xe5 (vendor) [ 2007.655828][ C0] sd 0:0:1:0: [sg0] tag#525 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2007.665317][ C0] sd 0:0:1:0: [sg0] tag#525 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2007.674793][ C0] sd 0:0:1:0: [sg0] tag#525 CDB[20]: ba 11:16:16 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:16 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a01fffffff6000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) recvmmsg$unix(r1, &(0x7f00000054c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/53, 0x35}, {&(0x7f0000001400)=""/135, 0x87}], 0x9, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001640), 0x6e, &(0x7f00000028c0)=[{&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/63, 0x3f}, {&(0x7f0000002700)=""/219, 0xdb}, {&(0x7f0000002800)=""/174, 0xae}], 0x4, &(0x7f0000002900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002980)=@abs, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/231, 0xe7}, {&(0x7f0000002b40)=""/98, 0x62}], 0x3, &(0x7f0000002c00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000002cc0), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000002d40)=""/92, 0x5c}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/202, 0xca}], 0x3}}, {{&(0x7f0000003f00), 0x6e, &(0x7f0000005400)=[{&(0x7f0000003f80)=""/71, 0x47}, {&(0x7f0000004000)=""/124, 0x7c}, {&(0x7f0000004080)=""/75, 0x4b}, {&(0x7f0000004100)=""/23, 0x17}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/160, 0xa0}, {&(0x7f0000005200)=""/227, 0xe3}, {&(0x7f0000005300)=""/202, 0xca}], 0x8, &(0x7f0000005480)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x20, &(0x7f0000005600)={0x77359400}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 2007.984455][ C0] sd 0:0:1:0: [sg0] tag#526 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2007.994753][ C0] sd 0:0:1:0: [sg0] tag#526 CDB: opcode=0xe5 (vendor) [ 2008.001515][ C0] sd 0:0:1:0: [sg0] tag#526 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2008.010996][ C0] sd 0:0:1:0: [sg0] tag#526 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2008.020471][ C0] sd 0:0:1:0: [sg0] tag#526 CDB[20]: ba 11:16:18 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x16c0, 0x0, &(0x7f00000001c0), 0x10) 11:16:18 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:18 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:18 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendto$inet(r1, &(0x7f0000000000)="996a0a7b8057d9e34035aa32224ad8f7f89a3f1b2d8e2b17c79e4f957e30c6c18543416096c0957248188a6a3facd686d80c0f09441921a2c7c32f57d67d13def46301a46b503b89f38ffab6d86d8486cf5a51f6c2d5459386c0bdeb490fec1fce877d96864e1c2a80f8b2874a711b79e2d48a3152cb35a1d6f14722df885addbe7a5da31d2ce2e2cd6d5972f8856ee4e88eba24f717ca5b36", 0x99, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @private=0xa010100}, 0x10) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000005c0)={0x4c, 0x12, &(0x7f00000001c0)="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"}) 11:16:18 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a01fffffffe000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x825}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 2009.258532][ C0] sd 0:0:1:0: [sg0] tag#531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2009.268848][ C0] sd 0:0:1:0: [sg0] tag#531 CDB: opcode=0xe5 (vendor) [ 2009.275638][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2009.285120][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2009.294605][ C0] sd 0:0:1:0: [sg0] tag#531 CDB[20]: ba 11:16:18 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) 11:16:18 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a01f6ffffff000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:18 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) [ 2009.548341][ C0] sd 0:0:1:0: [sg0] tag#532 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2009.558637][ C0] sd 0:0:1:0: [sg0] tag#532 CDB: opcode=0xe5 (vendor) [ 2009.565429][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2009.574924][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2009.584396][ C0] sd 0:0:1:0: [sg0] tag#532 CDB[20]: ba 11:16:18 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x1c70, 0x0, &(0x7f00000001c0), 0x10) 11:16:18 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a01feffffff000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:18 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2000002, {{0x2, 0x4e20, @local}}}, 0x88) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="cedc77deea6a459d92e6fe37c028bd3ffa0ec70204e548567aa92b696d776072b4226caf3d0afe84d5e03b1ab5eaecb7fcb2c4a50a5b1e3d4c", 0x39}], 0x1) 11:16:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:18 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:18 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100020000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 2009.841604][ C0] sd 0:0:1:0: [sg0] tag#564 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2009.852001][ C0] sd 0:0:1:0: [sg0] tag#564 CDB: opcode=0xe5 (vendor) [ 2009.858795][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2009.868302][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2009.877822][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[20]: ba 11:16:18 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "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", "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"}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:18 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x2220, 0x0, &(0x7f00000001c0), 0x10) 11:16:18 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100030000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 2010.147951][ C0] sd 0:0:1:0: [sg0] tag#516 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2010.158239][ C0] sd 0:0:1:0: [sg0] tag#516 CDB: opcode=0xe5 (vendor) [ 2010.165024][ C0] sd 0:0:1:0: [sg0] tag#516 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2010.174648][ C0] sd 0:0:1:0: [sg0] tag#516 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2010.184446][ C0] sd 0:0:1:0: [sg0] tag#516 CDB[20]: ba 11:16:19 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:19 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x27d0, 0x0, &(0x7f00000001c0), 0x10) 11:16:19 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x30c180, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="f985e0259f7c47ba72ff9b887f93b4054dd31d0b4c3b031ccd3a2b6d540e706668cf3ba9731a6a9cd30f862d87b8c88bdb0938a6a0c55ff1bf6e4d9adcd94341a36b68de646461bddeafb56ddaad9369644e0378ed944f9fa3b2daf72ffec21e4d84f001a03a218f8ebe9b692dce7eb18e967efd157a87f00ba37f1980e6d26d7ba301f5bb29885366f2e47bab469011bf688793c4d701b727100797755215deb54474c1a693f6a56d2a0ce3eb4c0dba099c97e50d5980eddf03fc69b73646ea", 0xc0}, {&(0x7f0000000180)="d3fb51bb245e470e742809db3d8fb55d7e40a4f0dde5cc1ae7aa436866dc39f97add721006b5fc67c09db240c9617cac106430329cf1bc48b40c1ca6657ea4c0c430f04d73bd48186a711af7aeb4c8b9b81ddd30110fdecfb9425e786cefe5fe5c7e2557ef13945c23b365c13195eeb8f74db1b4159aa947f686d26bd8f1b94479e5b5899f5e9faf5a9cdcb08deb2276facaf0f151853df3d7da366b000a4d206c6ca8f727dc81db530ce0f1d44d6b58c567b0928489f6514e266af933fc48cdc4d8044b6a6e7178e1c80b72679707154c2c6c48c4170345dd2fe4d47e3939d981a350fd5fd7e731a7110e0b", 0xec}, {&(0x7f0000000280)='&I9', 0x3}], 0x3) r1 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="90766836d0c350b1b1f8d334e0068c1382385c7a92ce239517c11c1285cbeaa0a0fdccc2c3d36c6b1201e74fa16b518b8459814df13982db5a5b08d962ab7c2c19698ab6d28818f2c5c704d122e3bd1075ffc72130083e962bf8c5b2958e3e54c54fb9fe764d89d78bbe92f11c642bd8f0eac4a2756666c95c902af0a58e4ae2626686a741823c6fbb4bc1e60704803a", 0x90, 0x41, &(0x7f00000003c0)={0x2, 0x4e24, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_RELDISP(r4, 0x5605) 11:16:19 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x802, @remote}}}, 0x88) 11:16:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10220, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xff, 0x9}, 0x800, 0x0, 0x401, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000240)="da52f22854f10fe659aaf645afa3e0a0d2f95dc956d39669d2db06c3b69740a22a1bec2c418685acdde16cf1060ca732e1128d3db03dbb1839a12ce10875d9b511a3a706d2656c57fc13f27bb28a9eb7ecf8cf5b49eca97620db12ac9dec11221c7d6a09fb9ede0f23ab86ea316a39742e2cd63c6f7d01040555eaaee541b0cc4ce76b1d23a60260604d524486ffe317", 0x90, 0x80, &(0x7f00000001c0)={0x2, 0x100}, 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:19 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100040000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:19 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000180)="ce8488d1b8cfb460d70de741904045ed47bce4ae3b88f8a1fdd758e8ee047ea59d3501c721079f80b028246fc640be3bacc6bb6b8fc6d10ed21567e360fecf902d779eb1e61e1c57017fc4ac81c838890fe7d8e4d3135137b8472f53dc48ffbb8055599ec63cc81c61ee449db459e6fe53a2f3c711") preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x6, 0xf8, 0x39, 0x0, 0x7, 0x40108, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x4}, 0x101a0, 0x9, 0xffff7fff, 0xedf6656d8f033afd, 0x9, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x7f}, 0x0, 0x9, r0, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @broadcast}}}, 0x88) 11:16:19 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:19 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100050000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x181880) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:19 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:19 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) perf_event_open(0x0, 0x0, 0x0, r1, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x10e, 0x1f, 0x4, 0x9, 0x12, "7c2fcc9f95515957"}) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:19 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x2d80, 0x0, &(0x7f00000001c0), 0x10) 11:16:19 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100060000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:19 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x180) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x4010, r0, 0x5657) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:19 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r6, 0x0) 11:16:19 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x5, 0x7, 0x40, 0x2, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x10000, 0x4}, 0x1021, 0x4a, 0x4, 0x7, 0x6214, 0x8, 0x0, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0x4, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x5, 0x1}]}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 2011.060308][ C0] scsi_io_completion_action: 3 callbacks suppressed [ 2011.060328][ C0] sd 0:0:1:0: [sg0] tag#517 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2011.077203][ C0] sd 0:0:1:0: [sg0] tag#517 CDB: opcode=0xe5 (vendor) [ 2011.083968][ C0] sd 0:0:1:0: [sg0] tag#517 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2011.093491][ C0] sd 0:0:1:0: [sg0] tag#517 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2011.102963][ C0] sd 0:0:1:0: [sg0] tag#517 CDB[20]: ba 11:16:20 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100070000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:20 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x3330, 0x0, &(0x7f00000001c0), 0x10) 11:16:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:20 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:20 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) syz_open_pts(r2, 0x80000) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='//\x00', 0x3, 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000080)) socket$inet(0x2, 0x1, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x4e21, @loopback}}}, 0x88) 11:16:20 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x38e0, 0x0, &(0x7f00000001c0), 0x10) 11:16:20 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100080000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) [ 2011.476894][ C0] sd 0:0:1:0: [sg0] tag#520 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2011.487204][ C0] sd 0:0:1:0: [sg0] tag#520 CDB: opcode=0xe5 (vendor) [ 2011.494007][ C0] sd 0:0:1:0: [sg0] tag#520 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2011.503492][ C0] sd 0:0:1:0: [sg0] tag#520 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2011.513229][ C0] sd 0:0:1:0: [sg0] tag#520 CDB[20]: ba 11:16:20 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:20 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x3e90, 0x0, &(0x7f00000001c0), 0x10) 11:16:20 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x800, 0x100) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000180)={0x0, "650e65713b210431f276a70846ebf9bd"}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001180)={r4, "4645ffc822613a735d47083841c0761b"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:20 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100180000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:20 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 2011.972983][ C0] sd 0:0:1:0: [sg0] tag#530 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2011.983298][ C0] sd 0:0:1:0: [sg0] tag#530 CDB: opcode=0xe5 (vendor) [ 2011.990181][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2011.999699][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2012.009279][ C0] sd 0:0:1:0: [sg0] tag#530 CDB[20]: ba 11:16:20 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x4440, 0x0, &(0x7f00000001c0), 0x10) 11:16:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(r1, &(0x7f0000000000)=0x1a, r0, &(0x7f0000000040)=0x8, 0x7fffffff, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/101, 0x65}], 0x1, 0x3f, 0xfffffff7, 0x14) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:21 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a01001c0000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x8, 0x7, 0x3, 0x0, 0x10000, 0x8400, 0x87c0c92c3ffc55af, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x1}, 0x41, 0x7f, 0x7ff, 0x9, 0x7, 0x577, 0x359, 0x0, 0x2, 0x0, 0x100000001}, 0x0, 0x1, r0, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:21 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:21 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x49f0, 0x0, &(0x7f00000001c0), 0x10) 11:16:21 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100260000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='m@-,\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 2012.806290][ C0] sd 0:0:1:0: [sg0] tag#537 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2012.816590][ C0] sd 0:0:1:0: [sg0] tag#537 CDB: opcode=0xe5 (vendor) [ 2012.823578][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2012.833082][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2012.842537][ C0] sd 0:0:1:0: [sg0] tag#537 CDB[20]: ba 11:16:21 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000780)={0x6, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x6) r1 = socket$inet(0x2, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x628000, 0x80) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000080)}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000440)=""/17, 0x11}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/82, 0x52}], 0xa, 0xbd, 0xffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0xd3, 0x4, 0x2, 0x7, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb7, 0x1, @perf_config_ext={0x8, 0x2}, 0x10, 0x6, 0x1, 0x1, 0xac, 0x401, 0xc12, 0x0, 0x800, 0x0, 0xcac}, r3, 0x2, 0xffffffffffffffff, 0xa) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:21 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100fe0000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) 11:16:22 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 2013.128437][ C0] sd 0:0:1:0: [sg0] tag#540 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2013.138728][ C0] sd 0:0:1:0: [sg0] tag#540 CDB: opcode=0xe5 (vendor) [ 2013.145515][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2013.154989][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2013.164477][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[20]: ba 11:16:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x9, 0x7, 0x40, 0xbfb, 0x6, "9930e7fc333e4029f337c95e6fc0acfbc4eb24"}) 11:16:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:22 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100040200000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:22 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r1 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x800) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000400)=""/208, 0xd0}], 0x4, 0x200, 0x1f) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) socket$inet(0x2, 0x3, 0x8001) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="1ec000000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002004e23ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac14142c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000602004e22e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1e010100"/773], 0x310) [ 2013.522717][ C0] sd 0:0:1:0: [sg0] tag#545 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2013.533016][ C0] sd 0:0:1:0: [sg0] tag#545 CDB: opcode=0xe5 (vendor) [ 2013.539782][ C0] sd 0:0:1:0: [sg0] tag#545 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2013.549375][ C0] sd 0:0:1:0: [sg0] tag#545 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2013.558883][ C0] sd 0:0:1:0: [sg0] tag#545 CDB[20]: ba 11:16:22 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x4fa0, 0x0, &(0x7f00000001c0), 0x10) 11:16:22 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000300000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:22 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 2013.817613][ C0] sd 0:0:1:0: [sg0] tag#553 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2013.827914][ C0] sd 0:0:1:0: [sg0] tag#553 CDB: opcode=0xe5 (vendor) [ 2013.834697][ C0] sd 0:0:1:0: [sg0] tag#553 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2013.844163][ C0] sd 0:0:1:0: [sg0] tag#553 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2013.853649][ C0] sd 0:0:1:0: [sg0] tag#553 CDB[20]: ba 11:16:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xffff7ffffffffffc, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "e6686489de4026624a2d2e86f2739727"}, 0x11, 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x0, 0x2, 0x7, 0x1000}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={{r1}, 0x6db, 0x0, 0x7ff}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:22 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100020400000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:22 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x14000, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:23 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:23 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x3ff, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000040000387ad16ba045c4ea000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff0000000000000000000000004f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff0000000000000000000000000000000000000000000000000000000000000000000295cc5a9a84b3fa"], 0x310) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x80000, 0x1) dup2(r2, r1) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000080)="cb3270373994c6b2e5462a") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r4, &(0x7f00000001c0)="7a403dff03000000000000cd6a4585c21000885d8cfb177cffbc8caa55c3759d8338a5385f9ba6e22e9eab82dcd0f512ca0a5447ad691b18804e708a1ab396a27face43938f476b9a129043faa06d30049a38f0000", 0x55, 0x0, &(0x7f0000000180), 0x10) splice(r4, &(0x7f0000000000)=0x17, r0, &(0x7f0000000040)=0x8, 0x100000000, 0x4) [ 2014.157115][ C0] sd 0:0:1:0: [sg0] tag#555 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2014.167430][ C0] sd 0:0:1:0: [sg0] tag#555 CDB: opcode=0xe5 (vendor) [ 2014.174228][ C0] sd 0:0:1:0: [sg0] tag#555 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2014.183717][ C0] sd 0:0:1:0: [sg0] tag#555 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2014.193245][ C0] sd 0:0:1:0: [sg0] tag#555 CDB[20]: ba 11:16:23 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100060400000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:23 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xffffffffffffffff, 0x1a, 0xb0, @scatter={0x4, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000180)=""/203, 0xcb}, {&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000000280)=""/98, 0x62}]}, &(0x7f0000000340)="fc50b596c75467f66cc218d2ee9be529a02cbcc3dfc62233bcf4", &(0x7f0000000380)=""/69, 0x6, 0x24, 0xffffffffffffffff, &(0x7f0000000400)}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x6, 0x80000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x88000, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:23 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 2014.441013][ C0] sd 0:0:1:0: [sg0] tag#556 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2014.451353][ C0] sd 0:0:1:0: [sg0] tag#556 CDB: opcode=0xe5 (vendor) [ 2014.458123][ C0] sd 0:0:1:0: [sg0] tag#556 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2014.467638][ C0] sd 0:0:1:0: [sg0] tag#556 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2014.477144][ C0] sd 0:0:1:0: [sg0] tag#556 CDB[20]: ba 11:16:23 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x5550, 0x0, &(0x7f00000001c0), 0x10) 11:16:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x220, 0x0, 0x0, 0x6, 0x1000, 0x8000000, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:23 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x5, 0x1000adf) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:23 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100800400000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:23 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:23 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0xc0, 0x9, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$VT_RELDISP(r2, 0x5605) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000180)) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 2014.866244][ C0] sd 0:0:1:0: [sg0] tag#557 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2014.876903][ C0] sd 0:0:1:0: [sg0] tag#557 CDB: opcode=0xe5 (vendor) [ 2014.883695][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2014.893162][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2014.902665][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[20]: ba 11:16:23 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) syz_open_pts(r0, 0x101000) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000400000000000000000000000000000000000000000009000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000000000000000000000000000000020000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff00000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) r2 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:24 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000500000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:24 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:24 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100440500000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:24 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x5b00, 0x0, &(0x7f00000001c0), 0x10) 11:16:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:24 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:24 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000600000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) perf_event_open(0x0, r1, 0xa, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x354f, [0x8001, 0x7ff000000000, 0x0, 0x1, 0x101, 0x2]}) r1 = socket$inet(0x2, 0x0, 0x0) fallocate(r1, 0x10, 0x9, 0x100) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:24 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:24 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100040600000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0xd633, 0xf1}, {0xffff, 0x9}]}) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x1, 0x80, 0xf6, 0xfa, 0x8, 0x2, 0x0, 0x2, 0xc0100, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000001c0), 0x6}, 0x400, 0x7fff, 0x4, 0x1, 0x7fff, 0x1000, 0xfffd, 0x0, 0x100, 0x0, 0x100}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x822}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r7, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:24 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xe2, 0x7, 0x0, 0x2, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x41a0, 0x0, 0x9, 0x1, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:24 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100000700000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:25 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x60b0, 0x0, &(0x7f00000001c0), 0x10) 11:16:25 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = getpgid(0x0) perf_event_open(0x0, r0, 0x1040000, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r1 = gettid() tkill(r1, 0x34) waitid(0x2, r1, &(0x7f0000000000), 0x4, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000240)="59546a78f68762dbcf6a6b3e6e0426e0719d5b97ca16e2ee8ccf3a7fc24843331261282de5f49ec8f31b1696587be2ce263b978f317b600c25d17c94813fd43b91a12c285f03bfb2c9d2620b293ec21197d55c7d4d57296a98e21a14d4266ab0b57556d2093df1dc73ac6d138e1a9790f94ea0843c307dd32a0badca796526a67b2cb3558fcd5c3666d5553d5d559d435f1dec485dbac879cc", 0x99, 0x4004, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ptrace$cont(0x9, r0, 0x1, 0x6) 11:16:25 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 2016.310678][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 2016.310706][ C0] sd 0:0:1:0: [sg0] tag#533 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2016.327610][ C0] sd 0:0:1:0: [sg0] tag#533 CDB: opcode=0xe5 (vendor) [ 2016.334396][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2016.343965][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2016.353451][ C0] sd 0:0:1:0: [sg0] tag#533 CDB[20]: ba 11:16:25 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:25 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100081000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:25 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x900, 0xb0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:25 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1ff, 0x481) sendfile(r1, r0, &(0x7f0000000040)=0x7, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:25 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100001800000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:25 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r5 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r5, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) 11:16:25 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = gettid() tkill(r1, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x80, 0x3f, 0x7f, 0x8, 0x0, 0x1, 0x208e6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x2000, 0xa21a, 0x4, 0x5, 0x1, 0x10000, 0x3, 0x0, 0x101, 0x0, 0x80000001}, r1, 0x2, r2, 0x2) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000080)=""/39, 0x27}], 0x4, 0x5, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:25 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000040)) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0xfffffffffffffffc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 2016.800235][ C0] sd 0:0:1:0: [sg0] tag#538 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2016.810553][ C0] sd 0:0:1:0: [sg0] tag#538 CDB: opcode=0xe5 (vendor) [ 2016.817371][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2016.826973][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2016.836548][ C0] sd 0:0:1:0: [sg0] tag#538 CDB[20]: ba [ 2017.111958][ C0] sd 0:0:1:0: [sg0] tag#540 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2017.122264][ C0] sd 0:0:1:0: [sg0] tag#540 CDB: opcode=0xe5 (vendor) [ 2017.129108][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2017.138598][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2017.148100][ C0] sd 0:0:1:0: [sg0] tag#540 CDB[20]: ba 11:16:26 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x6660, 0x0, &(0x7f00000001c0), 0x10) 11:16:26 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x4, 0xff, 0x5}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11:16:26 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100001c00000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:26 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) 11:16:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffc, 0xe5, 0x32, @scatter={0x1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/63, 0x3f}]}, &(0x7f0000000440)="9a4984931b3f17776ff7e60e64f1c21ecf4872b79c6f4ce5fb5352ddebd2f76eea236211f6e0214957722662d92dbad839efe37c1a39b84d5e688d729e4b827259ef879cf9bbc6ceac23fddc50ff080d6c675658b6be24fc156d31374423eb8395050707a017fe7b3aaa3be89ce0e7ee127e658f647dc986e02e2d519be3f15c6cb1dcdcd4579ad918ab000ec57cff108b37713a3b28f140b2ae7393f13c0b04867876a3cd133acd4ff1a2a5c1d09928d036199a79933e6445cb27b76ad97e376594da73ef22818626251c1b4bfbdc3bf7d2e416dc49d9968898d8c6fec5609a48972a6188", &(0x7f00000002c0)=""/55, 0x1000, 0x10003, 0x1, &(0x7f0000000300)}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r4, 0x0, 0x0, 0x0, 0x8}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x95) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r6 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) fcntl$getflags(r6, 0x0) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) [ 2017.321482][ C0] sd 0:0:1:0: [sg0] tag#543 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2017.331887][ C0] sd 0:0:1:0: [sg0] tag#543 CDB: opcode=0x9a [ 2017.337897][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[00]: 9a 49 84 93 1b 3f 17 77 6f f7 e6 0e 64 f1 c2 1e [ 2017.347375][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[10]: cf 48 72 b7 9c 6f 4c e5 fb 53 52 dd eb d2 f7 6e [ 2017.356853][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[20]: ea 23 62 11 f6 e0 21 49 57 72 26 62 d9 2d ba d8 [ 2017.366347][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[30]: 39 ef e3 7c 1a 39 b8 4d 5e 68 8d 72 9e 4b 82 72 [ 2017.375839][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[40]: 59 ef 87 9c f9 bb c6 ce ac 23 fd dc 50 ff 08 0d [ 2017.385337][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[50]: 6c 67 56 58 b6 be 24 fc 15 6d 31 37 44 23 eb 83 [ 2017.394812][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[60]: 95 05 07 07 a0 17 fe 7b 3a aa 3b e8 9c e0 e7 ee [ 2017.404309][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[70]: 12 7e 65 8f 64 7d c9 86 e0 2e 2d 51 9b e3 f1 5c [ 2017.413797][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[80]: 6c b1 dc dc d4 57 9a d9 18 ab 00 0e c5 7c ff 10 [ 2017.423268][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[90]: 8b 37 71 3a 3b 28 f1 40 b2 ae 73 93 f1 3c 0b 04 [ 2017.432742][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[a0]: 86 78 76 a3 cd 13 3a cd 4f f1 a2 a5 c1 d0 99 28 [ 2017.442480][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[b0]: d0 36 19 9a 79 93 3e 64 45 cb 27 b7 6a d9 7e 37 [ 2017.451946][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[c0]: 65 94 da 73 ef 22 81 86 26 25 1c 1b 4b fb dc 3b [ 2017.461437][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[d0]: f7 d2 e4 16 dc 49 d9 96 88 98 d8 c6 fe c5 60 9a 11:16:26 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @private=0xa010101}}}, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x7b8f5c1b, 0x4, 0x7, 0x7ff, 0xd, "82861d585e468e7c5c5c0d195c22cda5fe58ba"}) [ 2017.470917][ C0] sd 0:0:1:0: [sg0] tag#543 CDB[e0]: 48 97 2a 61 88 11:16:26 executing program 2: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r0, 0x0, 0x0, 0x0, 0x8}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x904) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r1 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x60b0, 0x0, &(0x7f00000001c0), 0x10) 11:16:26 executing program 1: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="0201a6ffffff0a0100002000000000ffffff0f00e931190000000000000680ffffffbf0000000900000087771f72003007000f00000000000000008000ca55aa", 0x40, 0x1c0}]) 11:16:26 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x822}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000140), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80) r7 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r7, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x903e0000}, 0x10) fcntl$getflags(r7, 0x0) [ 2017.686917][ C0] sd 0:0:1:0: [sg0] tag#548 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2017.697211][ C0] sd 0:0:1:0: [sg0] tag#548 CDB: opcode=0xe5 (vendor) [ 2017.704001][ C0] sd 0:0:1:0: [sg0] tag#548 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2017.713518][ C0] sd 0:0:1:0: [sg0] tag#548 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2017.723002][ C0] sd 0:0:1:0: [sg0] tag#548 CDB[20]: ba [ 2017.852099][T10705] ==================================================================