00c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 764.148671][ C1] sd 0:0:1:0: [sg0] tag#1547 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 764.159418][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB: Test Unit Ready [ 764.166368][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.176251][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.186179][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.196049][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.205915][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.215895][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.225764][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.235641][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.245553][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.255425][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.265362][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.275232][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.285131][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.285259][ C0] sd 0:0:1:0: [sg0] tag#1548 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 764.294914][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.295127][ C1] sd 0:0:1:0: [sg0] tag#1547 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.305727][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB: Test Unit Ready [ 764.330996][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.340882][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.350728][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.360664][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.370521][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.380450][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.390535][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.400505][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.410348][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.410480][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.429989][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.440058][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.450398][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.460277][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.470310][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.665917][ C0] sd 0:0:1:0: [sg0] tag#1549 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 764.676858][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB: Test Unit Ready [ 764.683519][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.693389][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.703279][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.713208][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.723161][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.733037][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.742904][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.752787][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.762696][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.772554][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.782408][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.792242][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.802149][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.812120][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 764.822029][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:16 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) 19:10:17 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:17 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:17 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x240143, 0x0) write$P9_RGETATTR(r0, 0x0, 0x8) 19:10:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:17 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 765.315054][ C1] sd 0:0:1:0: [sg0] tag#1551 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 765.325798][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB: Test Unit Ready [ 765.332575][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.342673][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.347680][ C0] sd 0:0:1:0: [sg0] tag#1550 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 765.352528][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.362985][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB: Test Unit Ready [ 765.372773][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.379367][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.389150][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.398862][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.408617][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.418480][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.428197][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.438338][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.448083][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.457789][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.468136][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.478067][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.487928][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.497658][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.507470][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.517198][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.526969][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.536770][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.546462][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.556199][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.566025][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.575750][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.585473][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.595297][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:17 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x240143, 0x0) write$P9_RGETATTR(r0, 0x0, 0x0) [ 765.613642][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.623527][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 765.633365][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:18 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:18 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:18 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:18 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:18 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) [ 766.039944][ C0] sd 0:0:1:0: [sg0] tag#1552 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 766.050912][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB: Test Unit Ready [ 766.057869][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.067832][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.077750][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.087712][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.097988][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.107875][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.117791][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.127667][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.137685][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.148195][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.158154][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.168110][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.178620][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.188476][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 766.198566][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/187, 0xbb}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) r3 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 19:10:18 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:19 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:19 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:19 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 767.074655][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 767.074789][ C1] sd 0:0:1:0: [sg0] tag#1555 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 767.092909][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB: Test Unit Ready [ 767.100067][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.110860][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.121245][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.131494][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.141399][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.152280][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.162224][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/68, 0x44}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xff59, 0x0, 0x0, 0x800e00518) shutdown(r1, 0x0) r3 = socket$inet6_udplite(0x1c, 0x2, 0x88) ppoll(&(0x7f00000000c0)=[{r3}, {r2}], 0x2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 767.173093][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.183041][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.192953][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.202895][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.212784][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.222748][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.232735][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.242669][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.279498][ C0] sd 0:0:1:0: [sg0] tag#1556 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 767.290299][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB: Test Unit Ready [ 767.297137][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.307008][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.316969][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.326891][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.336736][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.346585][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.356439][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.356568][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.376260][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.386130][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.396348][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.406204][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.416850][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.426786][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.436849][ C0] sd 0:0:1:0: [sg0] tag#1556 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.588614][ C0] sd 0:0:1:0: [sg0] tag#1557 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 767.599267][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB: Test Unit Ready [ 767.606124][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.616259][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.626241][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.636236][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.646222][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.656106][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.666282][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.676250][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.686260][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.696274][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.706146][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.716806][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.727096][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.737033][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 767.747060][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:19 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:19 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 767.985078][ C0] sd 0:0:1:0: [sg0] tag#1558 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 767.996114][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB: Test Unit Ready [ 768.002760][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.012901][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.013028][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.032752][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.032863][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.033054][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.066111][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.076183][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.086041][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.096121][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.105937][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.115784][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.125595][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.135457][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.145365][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:20 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x0, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:20 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {0x0}, {0x0}], 0x7}, 0x0) r5 = dup(r4) execve(0x0, 0x0, 0x0) shutdown(r5, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write(r6, &(0x7f0000003480)="dc11e430022fdc779f9b4d24bdd8fd586c6875b53dfa7d488f7f576b76d6631752d1dc6d62858c480074266f6c7ce209a81eeda7ced9e2a609d67edbdb33807baa39862cefecd836f1c56da1366b394b2b34d223344b07c7dcbf0ffacf3e9b52a5c868685a4657dbc694485e7c6bf6bfd719a78ab7475459ab4d48f65f700df04272ef99bc5c0d17ab6d9b158510ea84e436b3dea76caf9cffb0b6ff741e7df23989486491fe6ae2a187449f3e2007d939893806c20f2d24cbc9d1c54e9cba6110f23e2d6827889b4e827cf48558ac6d77d46c4c94a0e201249eb462258e9950d571044ee6", 0xff8b) shutdown(r3, 0x0) 19:10:20 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:20 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 768.736158][ C1] sd 0:0:1:0: [sg0] tag#1559 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 768.746919][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB: Test Unit Ready [ 768.753691][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.763799][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.773692][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.783564][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.793446][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.803614][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.813508][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.823531][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.834085][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.844303][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.854381][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.854513][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.874920][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.884786][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.894793][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.962984][ C0] sd 0:0:1:0: [sg0] tag#1560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 768.974392][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB: Test Unit Ready [ 768.981141][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 768.991017][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.000985][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.011088][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.020922][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.031033][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.041021][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.050980][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.061017][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.070860][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.080864][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.090899][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.100996][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.112828][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.122680][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.238613][ C1] sd 0:0:1:0: [sg0] tag#1561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 769.250304][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB: Test Unit Ready [ 769.257192][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.267534][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.277760][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.287607][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.297839][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.307818][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.317826][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.328167][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.338146][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.348908][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.358997][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.368979][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.378845][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.388909][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 769.398899][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/68, 0x44}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xff59, 0x0, 0x0, 0x800e00518) shutdown(r1, 0x0) r3 = socket$inet6_udplite(0x1c, 0x2, 0x88) ppoll(&(0x7f00000000c0)=[{r3}, {}], 0x2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 19:10:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:21 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:21 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:22 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x0, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 770.087718][ C1] sd 0:0:1:0: [sg0] tag#1562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 770.098439][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB: Test Unit Ready [ 770.105392][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.109707][ C0] sd 0:0:1:0: [sg0] tag#1563 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 770.115270][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.125805][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB: Test Unit Ready [ 770.136123][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.142660][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.152399][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.163182][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.172922][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.182680][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.192566][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.202290][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.212030][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.222786][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.233752][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.243498][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.253248][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.262988][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.273522][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.283350][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.293243][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.303231][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.313814][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.324223][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.334048][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.343803][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.353763][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.363467][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.373312][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.383046][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.401665][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.411786][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:22 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 770.809685][ C0] sd 0:0:1:0: [sg0] tag#1564 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 770.820669][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB: Test Unit Ready [ 770.827575][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.837406][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.847531][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.858373][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.868352][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.878271][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.888546][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.898492][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.908328][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.918303][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.928174][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.938089][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.948019][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.958153][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 770.968230][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:23 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:23 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x0, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:23 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/190, 0xbe}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000240)=""/29}, {&(0x7f0000000280)=""/101}, {&(0x7f0000000300)=""/170}, {&(0x7f00000003c0)=""/8}], 0x10000000000000cf) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r6, 0x0) accept4(r6, 0x0, 0x0, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 19:10:23 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:23 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 772.162249][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 772.162385][ C1] sd 0:0:1:0: [sg0] tag#1567 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 772.181005][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB: Test Unit Ready [ 772.187788][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.197805][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.208015][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.218130][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.228092][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.237989][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.248039][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.258365][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.268377][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.278353][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.288309][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.298220][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:24 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x0, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 772.308344][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.318377][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.328383][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.528440][ C0] sd 0:0:1:0: [sg0] tag#1568 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 772.539442][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB: Test Unit Ready [ 772.546221][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.556120][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.566044][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:24 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 772.576034][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.585927][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.595910][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.605884][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.616073][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/190, 0xbe}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/155, 0x9b}, {0x0}, {0x0}], 0x3) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r6, 0x0) accept4(r6, 0x0, 0x0, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 772.625969][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.635803][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.645723][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.655657][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.665689][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:24 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0x0, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 772.675619][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.685504][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.948227][ C1] sd 0:0:1:0: [sg0] tag#1569 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 772.959256][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB: Test Unit Ready [ 772.966162][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.976199][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.986449][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 772.996337][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.006329][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.017206][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.027440][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.037306][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.047145][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.057128][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.067009][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.077047][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.086929][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.096810][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.106752][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:25 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 773.307802][ C1] sd 0:0:1:0: [sg0] tag#1570 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 773.318495][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB: Test Unit Ready [ 773.325884][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.335838][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.345795][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.355809][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.365928][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.375902][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.385918][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.395905][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.405890][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.415760][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.425837][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.435772][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.445698][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.455667][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.465739][ C1] sd 0:0:1:0: [sg0] tag#1570 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:25 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0x0, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 773.851732][ C0] sd 0:0:1:0: [sg0] tag#1571 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 773.862499][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB: Test Unit Ready [ 773.869289][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.879176][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.889210][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:26 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 773.899079][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.908934][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.918974][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.928942][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.938855][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:26 executing program 1: [ 773.948896][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.958911][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.968925][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.978778][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.988808][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 773.998765][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.008767][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:26 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x0, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 774.284256][ C0] sd 0:0:1:0: [sg0] tag#1572 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 774.295100][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB: Test Unit Ready [ 774.302723][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.312798][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.322786][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.332764][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.342659][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.352526][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.362373][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.372246][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.382116][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.392173][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.401987][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.411850][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.421692][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.431549][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.441393][ C0] sd 0:0:1:0: [sg0] tag#1572 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:26 executing program 1: 19:10:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:26 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 774.672728][ C0] sd 0:0:1:0: [sg0] tag#1573 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 774.683384][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB: Test Unit Ready [ 774.690284][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.700261][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.710315][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.720259][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.730212][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.740218][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.750186][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.760043][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.769921][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.779848][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.789952][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.800135][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.809985][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.819878][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 774.829758][ C0] sd 0:0:1:0: [sg0] tag#1573 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:27 executing program 1: 19:10:27 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x0, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:27 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:27 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0x0, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 775.389830][ C0] sd 0:0:1:0: [sg0] tag#1574 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 775.400517][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB: Test Unit Ready [ 775.402218][ C1] sd 0:0:1:0: [sg0] tag#1575 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 775.407316][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.417833][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB: Test Unit Ready [ 775.427663][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.434709][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.434825][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.444688][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.454625][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.464326][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.474035][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.483859][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.493589][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.503411][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.513143][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.522849][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.532581][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.542591][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.552342][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.562102][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.571828][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.581643][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.591364][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.601076][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.610803][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.620542][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.630244][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.640019][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.649756][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.659513][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.669255][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.678985][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 775.688742][ C1] sd 0:0:1:0: [sg0] tag#1575 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:27 executing program 1: 19:10:27 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:28 executing program 1: 19:10:28 executing program 1: [ 776.357577][ C0] sd 0:0:1:0: [sg0] tag#1576 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 776.368234][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB: Test Unit Ready [ 776.374909][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.385233][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.395205][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:28 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:28 executing program 1: [ 776.405062][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.414832][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.424686][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.434548][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.444412][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:28 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 776.454413][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.464378][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.474210][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.484077][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.494153][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.503998][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 776.513874][ C0] sd 0:0:1:0: [sg0] tag#1576 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:28 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:28 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:10:29 executing program 1: [ 777.242993][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 777.243133][ C0] sd 0:0:1:0: [sg0] tag#1579 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 777.260765][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB: Test Unit Ready [ 777.267736][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.277624][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.287515][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.297491][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.307436][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.317286][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.327359][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.337491][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.347359][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.357212][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.367339][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.378720][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:29 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:29 executing program 1: [ 777.388779][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.398815][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 777.408849][ C0] sd 0:0:1:0: [sg0] tag#1579 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:29 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:29 executing program 1: 19:10:30 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 778.061483][ C0] sd 0:0:1:0: [sg0] tag#1580 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 778.072391][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB: Test Unit Ready [ 778.079171][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.089048][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.103497][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.113445][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.123469][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.133596][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.143655][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.155906][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.167241][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.177259][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.187172][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.197164][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:30 executing program 1: 19:10:30 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 778.207236][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.217106][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.227003][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.420435][ C1] sd 0:0:1:0: [sg0] tag#1581 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 778.431374][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB: Test Unit Ready [ 778.438582][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.448604][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.448704][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.448807][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.448907][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.449014][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.449129][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.509884][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.519831][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.529770][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.539679][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.549600][ C0] sd 0:0:1:0: [sg0] tag#1582 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 778.549758][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB: Test Unit Ready [ 778.560670][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.567258][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.577121][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.586809][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.596549][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.606343][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.616072][ C1] sd 0:0:1:0: [sg0] tag#1581 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.626151][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.644736][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.654822][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.668368][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.678763][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.688806][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.698679][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.708915][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:30 executing program 1: [ 778.719603][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.719730][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.739332][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.749428][ C0] sd 0:0:1:0: [sg0] tag#1582 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:31 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:10:31 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 779.301539][ C1] sd 0:0:1:0: [sg0] tag#1591 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 779.312727][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB: Test Unit Ready [ 779.319535][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.331217][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.341616][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.351598][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.361734][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.371626][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.381825][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.391837][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.402298][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.412491][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.422906][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.433454][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:31 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 779.444184][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.454619][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.464684][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:31 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 779.693673][ C0] sd 0:0:1:0: [sg0] tag#1537 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 779.704535][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB: Test Unit Ready [ 779.711387][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.721516][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.731976][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.741855][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.751731][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.763059][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.773023][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.783004][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.793116][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.803079][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.812987][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.822838][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.832712][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.842594][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 779.852587][ C0] sd 0:0:1:0: [sg0] tag#1537 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:31 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414"], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:32 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:32 executing program 1: 19:10:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 780.520679][ C1] sd 0:0:1:0: [sg0] tag#1539 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 780.531588][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB: Test Unit Ready [ 780.538481][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.548379][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.558267][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.562891][ C0] sd 0:0:1:0: [sg0] tag#1538 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 780.568116][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.578686][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB: Test Unit Ready [ 780.588371][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.594864][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.604656][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.614409][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.624261][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.633987][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.643717][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.654183][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.664202][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.673893][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.683597][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.693401][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.703159][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.713233][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.722918][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.732624][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.742360][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.752067][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:32 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 780.761809][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.771512][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.781267][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.790970][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.809323][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.819296][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.829812][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 780.839712][ C0] sd 0:0:1:0: [sg0] tag#1538 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:33 executing program 1: 19:10:33 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:33 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:33 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 781.215028][ C0] sd 0:0:1:0: [sg0] tag#1540 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 781.225686][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB: Test Unit Ready [ 781.233359][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.243227][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.253139][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.263102][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.273049][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.282930][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.292878][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.303128][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:33 executing program 1: 19:10:33 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414"], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 781.313056][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.322886][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.332878][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.343436][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.353493][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.363342][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.373241][ C0] sd 0:0:1:0: [sg0] tag#1540 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.560619][ C0] sd 0:0:1:0: [sg0] tag#1542 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 781.571323][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB: Test Unit Ready [ 781.578149][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.588004][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.597858][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.607774][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.617603][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.627465][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.637426][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.647280][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.657376][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.667361][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.677221][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.687071][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.696925][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.706851][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.716856][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:33 executing program 1: 19:10:34 executing program 1: 19:10:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:34 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:34 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:34 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414"], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:34 executing program 1: 19:10:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 782.387309][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 782.387443][ C1] sd 0:0:1:0: [sg0] tag#1543 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 782.405220][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB: Test Unit Ready [ 782.411976][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.421845][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.431769][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.441669][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.451617][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.461508][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.471373][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.481362][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.491345][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.501218][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.511378][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.521400][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.531474][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.534700][ C0] sd 0:0:1:0: [sg0] tag#1544 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 782.541373][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.541490][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.552532][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB: Test Unit Ready [ 782.577569][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.587464][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.597295][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.607363][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.617301][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.627247][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.637094][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.646990][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.656826][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.666821][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.677637][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.687568][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.697430][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.708095][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 782.717979][ C0] sd 0:0:1:0: [sg0] tag#1544 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:34 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:34 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 783.200662][ C0] sd 0:0:1:0: [sg0] tag#1547 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 783.211526][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB: Test Unit Ready [ 783.218254][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.228105][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.237974][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.247844][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.257717][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.267661][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.277629][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.287597][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.297442][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.307368][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.317239][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.327182][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.337143][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.347128][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.356979][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:34 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 783.449042][ C1] sd 0:0:1:0: [sg0] tag#1545 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 783.459803][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB: Test Unit Ready [ 783.466621][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.476583][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.486641][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.496576][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.506529][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.516584][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.526540][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.536484][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.546524][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.556474][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.566421][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.576383][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.586427][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.596441][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.606361][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.615410][ C1] sd 0:0:1:0: [sg0] tag#1546 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 783.626307][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB: Test Unit Ready [ 783.633065][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.642996][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.653041][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.663005][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.672980][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.682919][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.692873][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.702811][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.712923][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.722981][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.733317][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:35 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:35 executing program 1: 19:10:35 executing program 1: 19:10:35 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c3000"/473], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:35 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:35 executing program 1: [ 783.743313][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.753257][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.763511][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.773538][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 19:10:36 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:36 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c3000"/473], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:36 executing program 1: [ 784.170893][ C0] sd 0:0:1:0: [sg0] tag#1548 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 784.181800][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB: Test Unit Ready [ 784.188571][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.198435][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.208478][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.218710][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.228797][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.238700][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.248632][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.260523][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.270494][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.280953][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.290880][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.300773][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.310682][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.320562][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.330478][ C0] sd 0:0:1:0: [sg0] tag#1548 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.339513][ C0] sd 0:0:1:0: [sg0] tag#1549 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 784.350272][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB: Test Unit Ready [ 784.356991][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.366889][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.377166][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.387176][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.397045][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.407342][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.417165][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.427136][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.437043][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.447006][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.457021][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.466898][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.476802][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.486710][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.496605][ C0] sd 0:0:1:0: [sg0] tag#1549 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:36 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 19:10:36 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c3000"/473], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:36 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:36 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 784.925648][ C1] sd 0:0:1:0: [sg0] tag#1550 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 784.936464][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB: Test Unit Ready [ 784.943122][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.953094][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.963008][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.973524][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.983421][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 784.993331][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.003345][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.013276][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.023186][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.033073][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.042971][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.053005][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.062910][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.072922][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.082831][ C1] sd 0:0:1:0: [sg0] tag#1550 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:37 executing program 1: 19:10:37 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:10:37 executing program 1: [ 785.532943][ C1] sd 0:0:1:0: [sg0] tag#1551 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 785.543706][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB: Test Unit Ready [ 785.550793][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.560850][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.570789][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.580742][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.590712][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.600763][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.610729][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.620679][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.634664][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.644701][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.654659][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.664614][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:37 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 785.674581][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.684528][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.694489][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:37 executing program 1: 19:10:37 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 785.845603][ C1] sd 0:0:1:0: [sg0] tag#1556 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 785.856435][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB: Test Unit Ready [ 785.863274][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.873196][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.883156][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:37 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 785.893013][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.903051][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.912998][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.922907][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.932906][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.942925][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.952988][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.962863][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.972802][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 785.982676][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:38 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 785.992642][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 786.002528][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:38 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f75"], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:38 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:38 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:10:38 executing program 1: 19:10:38 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:39 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f75"], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:39 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:39 executing program 1: 19:10:39 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 787.493297][ C0] scsi_io_completion_action: 3 callbacks suppressed [ 787.493441][ C0] sd 0:0:1:0: [sg0] tag#1560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 787.510924][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB: Test Unit Ready [ 787.517821][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.527672][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.537529][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.547502][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.557351][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.567184][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.577023][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.586893][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.596746][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.606665][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.616599][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.626647][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.636521][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.646688][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.656834][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.660600][ C1] sd 0:0:1:0: [sg0] tag#1561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 787.676282][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB: Test Unit Ready [ 787.683037][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.692949][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.702852][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.712880][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.722796][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.732744][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:39 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 787.742679][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.752647][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.762649][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.773105][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.783346][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 787.793437][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.803484][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.813373][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 787.823508][ C1] sd 0:0:1:0: [sg0] tag#1561 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:40 executing program 1: 19:10:40 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f75"], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:40 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:10:40 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:40 executing program 1: [ 788.702807][ C0] sd 0:0:1:0: [sg0] tag#1564 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 788.713494][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB: Test Unit Ready [ 788.720393][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.730250][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.740151][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.746662][ C1] sd 0:0:1:0: [sg0] tag#1562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 788.749991][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.760421][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB: Test Unit Ready [ 788.770504][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.777072][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.786819][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.796551][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.806690][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.816428][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.826175][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.835900][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.845707][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.855359][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.865079][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.874734][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.884603][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.894618][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.905540][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.915291][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.924885][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.934643][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.944429][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.954203][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.964039][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.974009][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 788.993084][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.002950][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.012968][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.022832][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.031854][ C1] sd 0:0:1:0: [sg0] tag#1563 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 789.042590][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB: Test Unit Ready [ 789.049300][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.059292][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.069260][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.079425][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.089305][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.100430][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.110253][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.120121][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.130129][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.139985][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:41 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/591], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 789.149889][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.159831][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.169695][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.179576][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.190563][ C1] sd 0:0:1:0: [sg0] tag#1563 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:41 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) syz_emit_ethernet(0x5a, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x24, 0x2b, 0x0, @empty, @local, {[@dstopts={0x2b, 0x0, [], [@enc_lim={0x4, 0x1, 0x4}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xbb8) socket(0x10, 0x80002, 0x0) 19:10:41 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) syz_emit_ethernet(0x5a, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x24, 0x2b, 0x0, @empty, @local, {[@dstopts={0x2b, 0x0, [], [@enc_lim={0x4, 0x1, 0x4}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xbb8) socket(0x10, 0x80002, 0x0) 19:10:41 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 789.944794][ C0] sd 0:0:1:0: [sg0] tag#1566 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 789.955539][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB: Test Unit Ready [ 789.962203][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.972104][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.980337][ C1] sd 0:0:1:0: [sg0] tag#1565 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 789.982069][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.992567][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB: Test Unit Ready [ 790.002249][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.008798][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.018638][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.028360][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.038071][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.047814][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.057987][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.067884][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.078045][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.088104][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.097863][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.107629][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.117319][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.127054][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.136756][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.146501][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.156140][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.165871][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.175660][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.185342][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.195053][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.204818][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.214394][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.224235][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:42 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x932, 0x0) 19:10:42 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:42 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/591], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 790.245327][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.255299][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.265236][ C1] sd 0:0:1:0: [sg0] tag#1565 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) [ 790.667666][ C1] sd 0:0:1:0: [sg0] tag#1568 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 790.678413][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB: Test Unit Ready [ 790.685360][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.695538][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.705756][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.716190][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.726145][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.736085][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.746190][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.756136][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.766069][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.775991][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.786000][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.795913][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.805941][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:42 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:42 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 790.815943][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 790.826085][ C1] sd 0:0:1:0: [sg0] tag#1568 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:43 executing program 1: ioctl$TIOCOUTQ(0xffffffffffffffff, 0x4b46, 0x0) pipe(0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x54901, 0x8) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000002940)='\'\xc4\'\v\xec\xe4\t\xc5r<=\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000100)={0x0, 0x8}) [ 791.185576][ C1] sd 0:0:1:0: [sg0] tag#1569 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 791.196881][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB: Test Unit Ready [ 791.203526][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.213419][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.223298][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.233326][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.243217][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.253578][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.263555][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.273479][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.283383][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.293279][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.303196][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.313097][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.323011][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.333005][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.342907][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:43 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:43 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000), 0x200) r1 = dup(r0) write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7, 0x6d, 0xc00}, 0xfffffe99) 19:10:43 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/591], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 791.514892][ C0] sd 0:0:1:0: [sg0] tag#1567 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 791.526456][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB: Test Unit Ready [ 791.533091][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.542940][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.552944][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.563132][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.573119][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.582961][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.592825][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.602652][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.612478][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.622312][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.632117][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.642056][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.651890][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.661859][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 791.671784][ C0] sd 0:0:1:0: [sg0] tag#1567 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) syz_emit_ethernet(0x5a, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x24, 0x2b, 0x0, @empty, @local, {[@dstopts={0x2b, 0x0, [], [@enc_lim={0x4, 0x1, 0x4}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) socket(0x10, 0x0, 0x0) 19:10:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:44 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc008240a, &(0x7f0000002940)='\'\xc4\'\v\xec\xe4\t\xc5r<=\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f') 19:10:44 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 792.527797][ C1] scsi_io_completion_action: 3 callbacks suppressed [ 792.527938][ C1] sd 0:0:1:0: [sg0] tag#1573 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 792.545414][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB: Test Unit Ready [ 792.552072][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.561934][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.571874][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.581882][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.591741][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.601589][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.611455][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.621363][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.631362][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.641507][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.651358][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.661238][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:44 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/611], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:44 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 792.671079][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.680905][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.690864][ C1] sd 0:0:1:0: [sg0] tag#1573 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.963728][ C0] sd 0:0:1:0: [sg0] tag#1574 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 792.974487][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB: Test Unit Ready [ 792.981379][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 792.991318][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.001265][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.011219][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.021295][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.031142][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.040973][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.050800][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.060635][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.070539][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.080571][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.090392][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.100226][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.110069][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.120089][ C0] sd 0:0:1:0: [sg0] tag#1574 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:44 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:44 executing program 1: write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x59801, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[], 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x12fb, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{0x0, 0x0, 0x0, 0x3}, {0x801}]}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) execve(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000), 0x200) geteuid() 19:10:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:45 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:45 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000480)='asymmetric\x00', 0x0) r0 = memfd_create(&(0x7f0000000000), 0x200) r1 = dup(r0) write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7, 0x6d, 0xc00}, 0xfffffe99) 19:10:46 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/611], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:46 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 793.969598][ C0] sd 0:0:1:0: [sg0] tag#1575 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 793.980436][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB: Test Unit Ready [ 793.987205][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 793.990657][ C1] sd 0:0:1:0: [sg0] tag#1576 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 793.997133][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.007715][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB: Test Unit Ready [ 794.017561][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.024041][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.033874][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.043618][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.053271][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.063140][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.072851][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.082586][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.092434][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.102175][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.112136][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.122065][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.131949][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.141715][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.151490][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.161214][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.171022][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.180737][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.190431][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.200164][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.209873][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.219607][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.229340][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.239070][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.248778][ C0] sd 0:0:1:0: [sg0] tag#1575 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.258512][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.276911][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.287045][ C1] sd 0:0:1:0: [sg0] tag#1576 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.467915][ C1] sd 0:0:1:0: [sg0] tag#1577 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 794.478744][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB: Test Unit Ready [ 794.485503][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.495399][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.505635][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.515604][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.525810][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.537295][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.547187][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.557072][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.567127][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.577022][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.586912][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.596810][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.606685][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.616605][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.626496][ C1] sd 0:0:1:0: [sg0] tag#1577 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:46 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x9, 0x6, 0x0}) 19:10:46 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 794.947317][ C0] sd 0:0:1:0: [sg0] tag#1578 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 794.958027][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB: Test Unit Ready [ 794.964660][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.974583][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 794.984451][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:47 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 794.994435][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.004419][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.014256][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.024059][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.033943][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.043776][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.053637][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.063590][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.073519][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.083351][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.093229][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.103092][ C0] sd 0:0:1:0: [sg0] tag#1578 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:47 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/611], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:47 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc02812f8, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{}, {0x801}]}) [ 795.322787][ C1] sd 0:0:1:0: [sg0] tag#1579 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 795.333535][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB: Test Unit Ready [ 795.340277][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.350181][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.360165][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.370162][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.380054][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.390496][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.400331][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.410225][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.420101][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.430108][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.439966][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.450034][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.459895][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.469740][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.479591][ C1] sd 0:0:1:0: [sg0] tag#1579 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:47 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 795.632583][ C0] sd 0:0:1:0: [sg0] tag#1580 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 795.643328][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB: Test Unit Ready [ 795.650284][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.660113][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.670054][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.679894][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.689815][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.699662][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.709543][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.719474][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.729329][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.739454][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.749379][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.759236][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.769105][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:47 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 795.779111][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 795.788928][ C0] sd 0:0:1:0: [sg0] tag#1580 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:48 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:48 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:48 executing program 1: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x12fb, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) execve(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) geteuid() 19:10:48 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:48 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/621], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 796.300393][ C1] sd 0:0:1:0: [sg0] tag#1584 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 796.311410][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB: Test Unit Ready [ 796.318253][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.328084][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.338040][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.347874][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.357691][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.367507][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.377459][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.387316][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.397448][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.407286][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.417093][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.426905][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.436710][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.446594][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.456506][ C1] sd 0:0:1:0: [sg0] tag#1584 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:48 executing program 1: [ 796.607598][ C0] sd 0:0:1:0: [sg0] tag#1581 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 796.618242][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB: Test Unit Ready [ 796.624907][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.634949][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.644779][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.654630][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.664476][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.674477][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.684388][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.694237][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.704102][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.713934][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.723767][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.733934][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.743905][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:48 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 796.753744][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.763576][ C0] sd 0:0:1:0: [sg0] tag#1581 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:48 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/621], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:49 executing program 1: 19:10:49 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:49 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:49 executing program 1: [ 797.592479][ C1] scsi_io_completion_action: 4 callbacks suppressed [ 797.592682][ C1] sd 0:0:1:0: [sg0] tag#1538 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 797.610366][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB: Test Unit Ready [ 797.617075][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.627464][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.637326][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.647319][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.657203][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.667388][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.677249][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.687162][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.697061][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.706935][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.716883][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.726767][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.736677][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.746563][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 797.756535][ C1] sd 0:0:1:0: [sg0] tag#1538 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:50 executing program 1: 19:10:50 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:50 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:50 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/621], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:50 executing program 1: 19:10:50 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 798.492305][ C1] sd 0:0:1:0: [sg0] tag#1539 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 798.502983][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB: Test Unit Ready [ 798.509838][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.519734][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.529595][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.539507][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.549401][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.559396][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.569269][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.579130][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.589747][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.599588][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.599697][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.599798][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.599907][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.600052][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.648763][ C1] sd 0:0:1:0: [sg0] tag#1539 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.882322][ C1] sd 0:0:1:0: [sg0] tag#1540 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 798.893280][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB: Test Unit Ready [ 798.900084][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.910055][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.919946][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.929821][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.939737][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.949616][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.959497][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.969695][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.969804][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.969910][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.970030][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.970140][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:51 executing program 1: [ 798.970249][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.970359][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 798.970464][ C1] sd 0:0:1:0: [sg0] tag#1540 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.061188][ C1] sd 0:0:1:0: [sg0] tag#1541 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 799.072193][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB: Test Unit Ready [ 799.079310][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.089281][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.099255][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.109220][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.119152][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.129179][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.139191][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.149234][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.159388][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.169366][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.179391][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.189457][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.199521][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.209481][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.219591][ C1] sd 0:0:1:0: [sg0] tag#1541 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:51 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:51 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/626], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:51 executing program 1: 19:10:51 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 799.564552][ C0] sd 0:0:1:0: [sg0] tag#1542 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 799.575355][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB: Test Unit Ready [ 799.582100][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.592008][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.602213][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.612070][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.622137][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.632198][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.642329][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.652202][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.662287][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.672169][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.682018][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.691846][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.701834][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.701966][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.724407][ C0] sd 0:0:1:0: [sg0] tag#1542 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.980412][ C0] sd 0:0:1:0: [sg0] tag#1543 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 799.991275][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB: Test Unit Ready [ 799.998000][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.008067][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.018003][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.027944][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.037782][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.047594][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.058215][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.068062][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:52 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:52 executing program 1: [ 800.077917][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.087753][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.097652][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.107542][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.117500][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.127460][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.137313][ C0] sd 0:0:1:0: [sg0] tag#1543 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.177910][ C1] sd 0:0:1:0: [sg0] tag#1544 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 800.188625][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB: Test Unit Ready [ 800.195422][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.205279][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.215248][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.225333][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.235201][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.245106][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.254877][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.264778][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.274709][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.284603][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.294633][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.304897][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.314775][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.324652][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.334547][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:52 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:52 executing program 1: [ 800.550515][ C1] sd 0:0:1:0: [sg0] tag#1545 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 800.561236][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB: Test Unit Ready [ 800.568064][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.578448][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.588348][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.598287][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.608256][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.618292][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.628486][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.638355][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.648376][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.658244][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.668243][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.678385][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.688368][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:52 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 800.698347][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.708332][ C1] sd 0:0:1:0: [sg0] tag#1545 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:52 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:52 executing program 1: [ 800.888713][ C0] sd 0:0:1:0: [sg0] tag#1546 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 800.899426][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB: Test Unit Ready [ 800.906161][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.916132][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.925995][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.936066][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.945923][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.955766][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.965749][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.975851][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.985698][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 800.995760][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.005614][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.015434][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.025403][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:53 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/626], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 801.035301][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.045242][ C0] sd 0:0:1:0: [sg0] tag#1546 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.145304][ C0] sd 0:0:1:0: [sg0] tag#1547 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 801.156102][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB: Test Unit Ready [ 801.162809][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.172679][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.182559][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.192488][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.202431][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.212393][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.222228][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.232290][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.242130][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.251959][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.261827][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.271670][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.281631][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.291503][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 801.301359][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:53 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:53 executing program 1: 19:10:53 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:54 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:54 executing program 1: 19:10:54 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:54 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/626], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 802.684765][ C0] scsi_io_completion_action: 3 callbacks suppressed [ 802.684906][ C0] sd 0:0:1:0: [sg0] tag#1551 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 802.702702][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB: Test Unit Ready [ 802.709408][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.719250][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.729188][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.739254][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.749082][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.759078][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.769091][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.778945][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.788900][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.798769][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.808623][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.818660][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:54 executing program 1: [ 802.828600][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.838469][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.848744][ C0] sd 0:0:1:0: [sg0] tag#1551 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:55 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:55 executing program 1: 19:10:55 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 803.212197][ C1] sd 0:0:1:0: [sg0] tag#1552 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 803.222995][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB: Test Unit Ready [ 803.229722][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.239614][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.249667][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.259726][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.269617][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.281589][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.291830][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.301726][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.311658][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.322555][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.332569][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.342474][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.356072][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.366067][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.376161][ C1] sd 0:0:1:0: [sg0] tag#1552 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:55 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:55 executing program 1: 19:10:55 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 803.708726][ C1] sd 0:0:1:0: [sg0] tag#1553 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 803.719718][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB: Test Unit Ready [ 803.726554][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.736411][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.746333][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.756245][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.766225][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.776104][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.786239][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.796797][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.806739][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.816693][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.826736][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.836664][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.846532][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.856421][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.866321][ C1] sd 0:0:1:0: [sg0] tag#1553 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 803.992841][ C0] sd 0:0:1:0: [sg0] tag#1554 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 804.003513][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB: Test Unit Ready [ 804.010317][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.020220][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.030212][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.040140][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.049981][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.059830][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.070034][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.080020][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.090071][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.099876][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.109703][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.119532][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.129359][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:56 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 804.139223][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.149055][ C0] sd 0:0:1:0: [sg0] tag#1554 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.191738][ C1] sd 0:0:1:0: [sg0] tag#1555 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 804.202549][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB: Test Unit Ready [ 804.209440][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.219308][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.229171][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.239099][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.249164][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.259036][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.269089][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.279322][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.289220][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.299201][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.309110][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.319011][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.328893][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.338778][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 804.348658][ C1] sd 0:0:1:0: [sg0] tag#1555 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:56 executing program 1: 19:10:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:56 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/628], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:57 executing program 1: 19:10:57 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:57 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:57 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/628], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 805.194071][ C0] sd 0:0:1:0: [sg0] tag#1557 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 805.204831][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB: Test Unit Ready [ 805.211654][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.221494][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.230981][ C1] sd 0:0:1:0: [sg0] tag#1556 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 805.231500][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.241918][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB: Test Unit Ready [ 805.251652][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.258527][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.268264][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.278013][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.287745][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.297455][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.307172][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.316900][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.326730][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.336432][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.346152][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.355883][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.365592][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.375783][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.385505][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.395258][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.404886][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.414620][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.424415][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.434294][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.443980][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.453803][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.463522][ C0] sd 0:0:1:0: [sg0] tag#1557 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.473353][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.492824][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.502737][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 805.513221][ C1] sd 0:0:1:0: [sg0] tag#1556 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:57 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 806.000025][ C1] sd 0:0:1:0: [sg0] tag#1559 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 806.010853][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB: Test Unit Ready [ 806.017678][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.027826][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.037725][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.047624][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.057613][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.067636][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.077516][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.087404][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.097304][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.107294][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.107552][ C0] sd 0:0:1:0: [sg0] tag#1558 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 806.117182][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.127610][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB: Test Unit Ready [ 806.137443][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.144258][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.154163][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.163807][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.173559][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:58 executing program 1: [ 806.183287][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.193037][ C1] sd 0:0:1:0: [sg0] tag#1559 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.202767][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.221166][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.231076][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.241260][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.251266][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.261453][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.271438][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.281363][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.291212][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.301228][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.311084][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.321040][ C0] sd 0:0:1:0: [sg0] tag#1558 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:58 executing program 1: clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, 0x0) tkill(r0, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 19:10:58 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/628], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:58 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:59 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x0, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 806.957502][ C0] sd 0:0:1:0: [sg0] tag#1560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 806.968175][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB: Test Unit Ready [ 806.974906][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.984820][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 806.994814][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.004813][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.014681][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.024549][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.034384][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.044220][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.054069][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.064032][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.073958][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.083866][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.093705][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.103591][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.113795][ C0] sd 0:0:1:0: [sg0] tag#1560 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:10:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:10:59 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:10:59 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x0, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 807.712604][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 807.712753][ C1] sd 0:0:1:0: [sg0] tag#1562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 807.730370][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB: Test Unit Ready [ 807.737207][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.747066][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:59 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/629], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 807.757105][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.766969][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.776887][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.786774][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.796679][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:10:59 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 807.807576][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.817699][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.827555][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.837420][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.847357][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.857438][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.867415][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 807.877285][ C1] sd 0:0:1:0: [sg0] tag#1562 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:00 executing program 1: pipe2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x2040, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) syz_genetlink_get_family_id$SEG6(0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) [ 808.052113][ C0] sd 0:0:1:0: [sg0] tag#1563 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 808.062793][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB: Test Unit Ready [ 808.069573][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.079656][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.089887][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.100376][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.110508][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.120652][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.130507][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.140374][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.150889][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.160852][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.170889][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.180822][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.190768][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.200653][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.210643][ C0] sd 0:0:1:0: [sg0] tag#1563 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}], 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:00 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:00 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x0, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:00 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/629], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:00 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') chdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x6000, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) creat(0x0, 0x2) 19:11:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 808.920075][ C0] sd 0:0:1:0: [sg0] tag#1564 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 808.930721][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB: Test Unit Ready [ 808.937621][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.947518][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.957375][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.967296][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.977280][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.987489][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 808.997465][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.007780][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.017754][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.027671][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.037547][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.047495][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.057369][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.067202][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.077136][ C0] sd 0:0:1:0: [sg0] tag#1564 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.086301][ C0] sd 0:0:1:0: [sg0] tag#1565 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 809.096973][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB: Test Unit Ready [ 809.103688][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.113544][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.123410][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.133257][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.143147][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.153194][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.163080][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.172959][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.182870][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.192817][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.202782][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.212721][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.222584][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.232458][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.242345][ C0] sd 0:0:1:0: [sg0] tag#1565 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.251411][ C0] sd 0:0:1:0: [sg0] tag#1566 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 809.262363][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB: Test Unit Ready [ 809.269123][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.279043][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.288914][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.298769][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.308821][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.319087][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.329143][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.339028][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.349170][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.359018][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:01 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:01 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 809.368891][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.378758][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.388621][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.398485][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.408511][ C0] sd 0:0:1:0: [sg0] tag#1566 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.618231][ C1] sd 0:0:1:0: [sg0] tag#1567 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 809.623556][ C0] sd 0:0:1:0: [sg0] tag#1568 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 809.628929][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB: Test Unit Ready [ 809.639515][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB: Test Unit Ready [ 809.639629][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.646361][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.653037][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.662798][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.672591][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.682526][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.692366][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.702111][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.711848][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.721588][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.731309][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.741061][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.750789][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.760550][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.770385][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.780085][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.790034][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.799781][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.809520][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.819377][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.829244][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.839239][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.849002][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.858750][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.868464][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.878221][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.887950][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.897700][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.907529][ C0] sd 0:0:1:0: [sg0] tag#1568 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 809.917279][ C1] sd 0:0:1:0: [sg0] tag#1567 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:02 executing program 1: fanotify_init(0x0, 0x80000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa21}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x801, 0x0) r2 = socket(0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000080)) r4 = socket(0x0, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@loopback, r7}, 0x14) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr="0022a96e36592dbcc19af4962987f982", @in6=@rand_addr="25d5fddaf7049120f5d750834a2750cc", 0x0, 0x4, 0x4e23, 0x1f, 0xa, 0x20, 0x0, 0x3a, r7, 0xee01}, {0x0, 0x0, 0x9, 0x1f, 0x0, 0xfffffffffffffffb}, {0x3, 0x7, 0x4, 0x7}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3504, 0x4, 0x3, 0x20, 0x5, 0x0, 0x81}}, 0xe4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x400) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, 0x0) tkill(r1, 0x9) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r9 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 19:11:02 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:02 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/629], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:02 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 810.814639][ C1] sd 0:0:1:0: [sg0] tag#1569 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 810.825486][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB: Test Unit Ready [ 810.832446][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.842333][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.852223][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.862207][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.866904][ C0] sd 0:0:1:0: [sg0] tag#1570 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 810.872089][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.882507][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB: Test Unit Ready [ 810.892223][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.898885][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.908616][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.919157][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.928866][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.938824][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.948657][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.958372][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.968097][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.977854][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.989536][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 810.999246][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.009418][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.019176][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.028935][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.038744][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.048481][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.058211][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.067924][ C1] sd 0:0:1:0: [sg0] tag#1569 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.077676][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.096067][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.105927][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:03 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 811.115769][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.125783][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.135624][ C0] sd 0:0:1:0: [sg0] tag#1570 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.604100][ C0] sd 0:0:1:0: [sg0] tag#1571 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 811.614881][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB: Test Unit Ready [ 811.621701][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.631694][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.641785][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.651719][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.661607][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.672421][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.682372][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.692225][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.702294][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.712153][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.722062][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.732027][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.741943][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.751919][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 811.762077][ C0] sd 0:0:1:0: [sg0] tag#1571 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:04 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) syz_emit_ethernet(0x45, &(0x7f00000000c0)={@broadcast, @random="96c1e9574b31", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x5, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @remote}, "400000e3ff0000"}}}}}, 0x0) 19:11:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:04 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:04 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:04 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:04 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 812.769456][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 812.769600][ C1] sd 0:0:1:0: [sg0] tag#1574 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 812.787573][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB: Test Unit Ready [ 812.794236][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.804234][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.814266][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.824184][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.834061][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.844168][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.854079][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.864140][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.874021][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.883976][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.894001][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.903920][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:05 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x40000, 0x0, 0x3, 0x4, 0x10000}}, 0x50) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) dup2(r0, r2) [ 812.913957][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.923817][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 812.933687][ C1] sd 0:0:1:0: [sg0] tag#1574 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 813.161899][T22119] fuse: Bad value for 'fd' 19:11:05 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:05 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 19:11:05 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 813.672200][ C1] sd 0:0:1:0: [sg0] tag#1591 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 813.682987][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB: Test Unit Ready [ 813.689752][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.699638][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.709656][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.719943][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.729821][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.739884][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.749758][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.759647][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.759753][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.759859][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.759969][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.760128][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.809239][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 813.819244][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.829178][ C1] sd 0:0:1:0: [sg0] tag#1591 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:05 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:06 executing program 1: [ 813.959010][ C0] sd 0:0:1:0: [sg0] tag#1592 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 813.969793][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB: Test Unit Ready [ 813.976676][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.986715][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 813.996803][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.006724][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.016703][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.026556][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.036577][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.046427][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.056397][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.066249][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.076264][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.086245][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.096219][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.107030][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.116919][ C0] sd 0:0:1:0: [sg0] tag#1592 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.294685][ C1] sd 0:0:1:0: [sg0] tag#1593 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 814.305695][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB: Test Unit Ready [ 814.312386][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.322367][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.332386][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.343036][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.353071][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.363022][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.373127][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.383578][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.393453][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.403452][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.413338][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.423540][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.433460][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.443546][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.453660][ C1] sd 0:0:1:0: [sg0] tag#1593 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:06 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 19:11:06 executing program 1: 19:11:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:06 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:06 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 814.863211][ C1] sd 0:0:1:0: [sg0] tag#1594 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 814.873930][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB: Test Unit Ready [ 814.880715][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.890748][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.900622][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.910489][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.920481][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.930492][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.940390][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.950275][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:07 executing program 1: [ 814.960122][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.970161][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.980239][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 814.990327][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.000663][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.010775][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.020807][ C1] sd 0:0:1:0: [sg0] tag#1594 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.105535][ C0] sd 0:0:1:0: [sg0] tag#1595 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 815.116393][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB: Test Unit Ready [ 815.123175][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.133209][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.143286][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.153311][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.163179][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.173038][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.182997][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.193058][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.203273][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.213132][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.223520][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.233899][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.243889][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:07 executing program 1: [ 815.254881][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.264806][ C0] sd 0:0:1:0: [sg0] tag#1595 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:07 executing program 3: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 19:11:07 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:07 executing program 1: [ 815.838935][ C1] sd 0:0:1:0: [sg0] tag#1596 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 815.849744][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB: Test Unit Ready [ 815.856659][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.866627][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.876568][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.886447][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.893147][ C0] sd 0:0:1:0: [sg0] tag#1597 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 815.896808][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.907316][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB: Test Unit Ready [ 815.917060][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.923723][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.933470][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.943222][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.952961][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.962682][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.972398][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.982102][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 815.991930][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.002250][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.011986][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.021795][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.031548][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.041375][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.051531][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.061362][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.071208][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.080911][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.090723][ C1] sd 0:0:1:0: [sg0] tag#1596 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.100554][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.119225][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.129131][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:08 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 816.139104][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.148977][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.158821][ C0] sd 0:0:1:0: [sg0] tag#1597 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:08 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x7ff8, 0x2, 0x0, 0x27) 19:11:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:08 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 816.620802][ C1] sd 0:0:1:0: [sg0] tag#1598 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 816.631571][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB: Test Unit Ready [ 816.638415][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.648511][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.658456][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.668397][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.678406][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.688494][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.698450][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.708484][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.718426][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.728376][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.738306][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.748353][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.758312][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.768268][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.778297][ C1] sd 0:0:1:0: [sg0] tag#1598 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.903056][ C1] sd 0:0:1:0: [sg0] tag#1599 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 816.914200][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB: Test Unit Ready [ 816.921141][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.931206][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.941131][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:09 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:09 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:09 executing program 3: [ 816.951057][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.961008][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.970856][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.980973][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.990888][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:09 executing program 1: [ 817.000791][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 817.010736][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 817.020772][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 817.030639][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 817.041556][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 817.051423][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 817.061479][ C1] sd 0:0:1:0: [sg0] tag#1599 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:09 executing program 3: 19:11:09 executing program 1: 19:11:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:09 executing program 3: 19:11:10 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:10 executing program 1: 19:11:10 executing program 3: 19:11:10 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 818.224451][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 818.224595][ C0] sd 0:0:1:0: [sg0] tag#1541 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 818.242587][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB: Test Unit Ready [ 818.249275][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.259151][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.269042][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.278881][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.288744][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.298595][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.308878][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.318747][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.328698][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.338602][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.348454][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.358302][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:10 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 818.368158][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.378105][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.388063][ C0] sd 0:0:1:0: [sg0] tag#1541 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.610178][ C1] sd 0:0:1:0: [sg0] tag#1542 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 818.620998][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB: Test Unit Ready [ 818.628236][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.638220][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.648247][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.658133][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.667997][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.678300][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.688169][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.698128][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.708456][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.718467][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.728355][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.738268][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.748266][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.758388][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 818.768258][ C1] sd 0:0:1:0: [sg0] tag#1542 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:10 executing program 3: 19:11:10 executing program 1: 19:11:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:11 executing program 3: 19:11:11 executing program 1: 19:11:11 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:11 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 19:11:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:11 executing program 3: 19:11:11 executing program 1: 19:11:11 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 819.690090][ C1] sd 0:0:1:0: [sg0] tag#1543 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 819.700801][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB: Test Unit Ready [ 819.707609][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.717479][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.727464][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.737342][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.747300][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.757468][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.767331][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.777285][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.787149][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.787253][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.787359][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.787468][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.787573][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:11 executing program 3: [ 819.787697][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 819.849672][ C1] sd 0:0:1:0: [sg0] tag#1543 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:12 executing program 1: 19:11:12 executing program 3: [ 820.291093][ C1] sd 0:0:1:0: [sg0] tag#1544 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 820.301810][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB: Test Unit Ready [ 820.308638][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.318638][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.328510][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.338375][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.348304][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.358660][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.368533][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.378379][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.388231][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.398133][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.408134][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.418051][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.427975][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:12 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 820.437981][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.448072][ C1] sd 0:0:1:0: [sg0] tag#1544 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:12 executing program 1: 19:11:12 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:12 executing program 3: [ 820.970111][ C0] sd 0:0:1:0: [sg0] tag#1545 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 820.980980][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB: Test Unit Ready [ 820.987860][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 820.997726][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.007565][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.017397][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.027311][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.037199][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.047042][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.056894][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.066737][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.076580][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.086547][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.096387][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.106216][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:13 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 19:11:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 821.116073][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.126460][ C0] sd 0:0:1:0: [sg0] tag#1545 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.221650][ C1] sd 0:0:1:0: [sg0] tag#1546 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 821.232365][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB: Test Unit Ready [ 821.239262][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.249163][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.259217][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:13 executing program 1: [ 821.269252][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.279267][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.289264][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.299184][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.309054][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.319002][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.328861][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.338922][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.349398][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.359320][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.369227][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.379269][ C1] sd 0:0:1:0: [sg0] tag#1546 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:13 executing program 3: 19:11:13 executing program 1: 19:11:13 executing program 3: 19:11:13 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:14 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 821.988957][ C0] sd 0:0:1:0: [sg0] tag#1547 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 822.000430][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB: Test Unit Ready [ 822.007181][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.017025][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.026906][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.036949][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.046850][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.056670][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.066585][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.076551][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.086430][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.096369][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.106353][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.116224][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.126284][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:14 executing program 1: 19:11:14 executing program 5: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x100000}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 19:11:14 executing program 3: [ 822.136229][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.146109][ C0] sd 0:0:1:0: [sg0] tag#1547 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.485690][ C1] sd 0:0:1:0: [sg0] tag#1548 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 822.496373][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB: Test Unit Ready [ 822.503004][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.512918][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.523202][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.533146][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.543114][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.553080][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.563018][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.573072][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.582992][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.592936][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.602900][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.612850][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.622884][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.632758][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 822.642713][ C1] sd 0:0:1:0: [sg0] tag#1548 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x560e, &(0x7f0000000080)=""/82) 19:11:14 executing program 3: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044804}, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000180)=""/235) 19:11:14 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000000080)=""/82) 19:11:15 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:15 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0x27, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) r2 = socket(0x1e, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x500, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000020803000000000000001c25cd59db2f4c4328f41c08000002000003050003002100000005000300210000000900010073797a31001a80f4262ff607d4a6e7f39f46e0067de1c6e44c54659a5782442d5f0b0ba0a67b9f2f8a2887a50a776e706d35df1d1ba9b6dab1d77f8c626a8ce798004b8b3a198ddc40e48cab51e75e38b8960b4d6c56ab1655497528a3a1237ffec79329d4fb57311d70151ff11660244b5f797c251dc95236f5c0ecad1bdfadc9e6a0f1fcad92fd4384733613bfc80fe2e02784f5d4009ece584fad1f53c215edb5a1411e0e7acded1bbc106718a6830d31d0"], 0x38}, 0x1, 0x0, 0x0, 0x44008}, 0x4000000) getsockname$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) [ 823.251981][ C1] sd 0:0:1:0: [sg0] tag#1549 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 823.262710][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB: Test Unit Ready [ 823.269516][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.279707][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.289611][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.299494][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.309535][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.319413][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.329280][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.339387][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.349263][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.359235][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.369111][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.378982][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.388854][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.398891][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 823.408905][ C1] sd 0:0:1:0: [sg0] tag#1549 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 19:11:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b64, &(0x7f0000000080)=""/82) [ 823.621320][T22378] No such timeout policy "syz1" 19:11:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H'], 0x1}}, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000000080)=""/82) 19:11:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:15 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x4d4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) 19:11:16 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:16 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0x27, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) r2 = socket(0x1e, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x500, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000020803000000000000001c25cd59db2f4c4328f41c08000002000003050003002100000005000300210000000900010073797a31001a80f4262ff607d4a6e7f39f46e0067de1c6e44c54659a5782442d5f0b0ba0a67b9f2f8a2887a50a776e706d35df1d1ba9b6dab1d77f8c626a8ce798004b8b3a198ddc40e48cab51e75e38b8960b4d6c56ab1655497528a3a1237ffec79329d4fb57311d70151ff11660244b5f797c251dc95236f5c0ecad1bdfadc9e6a0f1fcad92fd4384733613bfc80fe2e02784f5d4009ece584fad1f53c215edb5a1411e0e7acded1bbc106718a6830d31d0"], 0x38}, 0x1, 0x0, 0x0, 0x44008}, 0x4000000) getsockname$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) [ 824.079457][ C0] sd 0:0:1:0: [sg0] tag#1550 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 824.090345][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB: Test Unit Ready [ 824.097142][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.106969][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.116858][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.126903][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.136767][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.146658][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.156492][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.166331][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.176270][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.187826][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.197689][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.208248][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.218238][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:16 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000003c0)=0x1, 0x4) 19:11:16 executing program 3: clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xa) [ 824.228130][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.238049][ C0] sd 0:0:1:0: [sg0] tag#1550 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 824.398032][T22408] No such timeout policy "syz1" 19:11:16 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0x27, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) r2 = socket(0x1e, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x500, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000020803000000000000001c25cd59db2f4c4328f41c08000002000003050003002100000005000300210000000900010073797a31001a80f4262ff607d4a6e7f39f46e0067de1c6e44c54659a5782442d5f0b0ba0a67b9f2f8a2887a50a776e706d35df1d1ba9b6dab1d77f8c626a8ce798004b8b3a198ddc40e48cab51e75e38b8960b4d6c56ab1655497528a3a1237ffec79329d4fb57311d70151ff11660244b5f797c251dc95236f5c0ecad1bdfadc9e6a0f1fcad92fd4384733613bfc80fe2e02784f5d4009ece584fad1f53c215edb5a1411e0e7acded1bbc106718a6830d31d0"], 0x38}, 0x1, 0x0, 0x0, 0x44008}, 0x4000000) getsockname$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) 19:11:16 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="84"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="ea004000000000008741c434b2e8307d0315ffceda5482427a7b209539e64169d6b720e7565e8265b44f8ef95c9909647ed7e253afff279340ab298c7801345f241f79cc326a02efc217ad50019500cc9a7c1188ac76d800000000c3366939a939668f38b1ea16877e58c4f151f13af28dad8cf20191f300"/129], 0x8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:11:16 executing program 1: memfd_create(&(0x7f0000000240)='\x126\x87\xd2\xf3\x88\xb4\x9a\xb4c\b`\xdfP\x80xC][p\x8a?\xa3\xea\x1c\x01\'\x0fH]\xe3\xeaj\xb9>V\xdbq|\xda\x1f\xcb6\x14\xa5\xe5\x8dN\xf7\xea\x01\ru\xf0%\xd3\x91\xb1\xaaR\x97tG\xbbk\xeeI\n\x0f\'o\x91\x91\xb5dd\x9c\xf5\xf4\xe6\xfa\x19c\xe16\xdd\x0e\xcd\xd0k\x0e\x1d\xc20\xf6\x0e\\\x1b\xe6\xe1\x8b\xdb\x83\xb80\x8br\xf6\x05\xfa\x17<\xd3\n\xb2\xcah\xac[#\xad\x1eOwH\xd5Y\xf75\f\xff\xee\xfb>\xd438|=\xa3T<1\x1esHVv~\xa2\xb1\x93%\x1a\x9b\xa4q_1\x7f\x1e\xe9\x92\xdf\x0f\x05K6t\xafB\x13\xc9\x9a\x90\x7f', 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x2) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) wait4(0x0, 0x0, 0x0, 0x0) 19:11:16 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 824.936742][T22432] No such timeout policy "syz1" 19:11:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:17 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0x27, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) r2 = socket(0x1e, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x500, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000020803000000000000001c25cd59db2f4c4328f41c08000002000003050003002100000005000300210000000900010073797a31001a80f4262ff607d4a6e7f39f46e0067de1c6e44c54659a5782442d5f0b0ba0a67b9f2f8a2887a50a776e706d35df1d1ba9b6dab1d77f8c626a8ce798004b8b3a198ddc40e48cab51e75e38b8960b4d6c56ab1655497528a3a1237ffec79329d4fb57311d70151ff11660244b5f797c251dc95236f5c0ecad1bdfadc9e6a0f1fcad92fd4384733613bfc80fe2e02784f5d4009ece584fad1f53c215edb5a1411e0e7acded1bbc106718a6830d31d0"], 0x38}, 0x1, 0x0, 0x0, 0x44008}, 0x4000000) getsockname$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) 19:11:17 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r4, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) dup3(r5, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 825.352067][T22443] No such timeout policy "syz1" 19:11:17 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0x27, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) r2 = socket(0x1e, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x500, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000020803000000000000001c25cd59db2f4c4328f41c08000002000003050003002100000005000300210000000900010073797a31001a80f4262ff607d4a6e7f39f46e0067de1c6e44c54659a5782442d5f0b0ba0a67b9f2f8a2887a50a776e706d35df1d1ba9b6dab1d77f8c626a8ce798004b8b3a198ddc40e48cab51e75e38b8960b4d6c56ab1655497528a3a1237ffec79329d4fb57311d70151ff11660244b5f797c251dc95236f5c0ecad1bdfadc9e6a0f1fcad92fd4384733613bfc80fe2e02784f5d4009ece584fad1f53c215edb5a1411e0e7acded1bbc106718a6830d31d0"], 0x38}, 0x1, 0x0, 0x0, 0x44008}, 0x4000000) getsockname$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 19:11:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 825.602882][ C1] sd 0:0:1:0: [sg0] tag#1551 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 825.613875][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB: Test Unit Ready [ 825.620679][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.631128][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.641116][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.651291][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.661224][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.671185][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.681080][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.691070][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.701085][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.710950][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.720954][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.730808][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.740672][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:11:17 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 825.750748][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.761604][ C1] sd 0:0:1:0: [sg0] tag#1551 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 825.829810][T22459] No such timeout policy "syz1" 19:11:18 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=@xdp, 0x80) [ 826.331827][T22468] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:11:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:18 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0x27, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) r2 = socket(0x1e, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x500, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000020803000000000000001c25cd59db2f4c4328f41c08000002000003050003002100000005000300210000000900010073797a31001a80f4262ff607d4a6e7f39f46e0067de1c6e44c54659a5782442d5f0b0ba0a67b9f2f8a2887a50a776e706d35df1d1ba9b6dab1d77f8c626a8ce798004b8b3a198ddc40e48cab51e75e38b8960b4d6c56ab1655497528a3a1237ffec79329d4fb57311d70151ff11660244b5f797c251dc95236f5c0ecad1bdfadc9e6a0f1fcad92fd4384733613bfc80fe2e02784f5d4009ece584fad1f53c215edb5a1411e0e7acded1bbc106718a6830d31d0"], 0x38}, 0x1, 0x0, 0x0, 0x44008}, 0x4000000) getsockname$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 19:11:18 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 826.688954][T22479] No such timeout policy "syz1" 19:11:19 executing program 1: socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="0500000023002f0000068908ac14140de0", 0x11}], 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:11:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="01f2f6d076490d4cf49a64a5b94da00c59242fc4fa78ce15cd7421be7480800251a9a33b18cb2b5231d3bd5a93af7ecacb0a7df1143344386bd29bfa37e514cdfbde57c7162562c916bc9ed2669d7753b37e5410b6797d044de6416539e61edb49a96b98b845ef3e33be10da4feb35f5ed909b5de6e86a8c5d20769ded5d34034ab62b723c8eb06664d2c65fad3bd15d0aec7d749abb18948b2f8c9dcfc9c177e0bac21b008d28cbf02d87d61c757d37acaccf26bd2ed8eda4ea0d505abb9d7e54c5ee083e03502aba19819eea344d971c700e12237a8465", 0xd8}, {&(0x7f00000001c0)="c533c1241c6be8796ad7ffa49616aaa71aff6b5f00efc8abc1b00dfb79b15e2522354c9e88ef4de632d8f8286dc2dd563ae3597047637c40233d4a906bcdc1551ba8d3280dea5bcbc8978b726ea6dde99c53f60dc5d36653922f3ac028ff368a702ba854892aa7d17f7ca2c46dd3a1e23fb8fcb6ec5c69f2c70d3f597005243148ce47e89d7de62f9ffc78408d6db66b640b", 0x92}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00'}) accept(r1, &(0x7f0000001480)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001500)=0x80) syz_genetlink_get_family_id$team(&(0x7f0000001580)='team\x00') accept$packet(0xffffffffffffffff, &(0x7f00000015c0), &(0x7f0000001600)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) 19:11:19 executing program 2: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c6801d"], 0x5a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0xd, 0x4000000000000800, 0x0, 0x2c8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 19:11:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:11:19 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0x27, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) r2 = socket(0x1e, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x500, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000020803000000000000001c25cd59db2f4c4328f41c08000002000003050003002100000005000300210000000900010073797a31001a80f4262ff607d4a6e7f39f46e0067de1c6e44c54659a5782442d5f0b0ba0a67b9f2f8a2887a50a776e706d35df1d1ba9b6dab1d77f8c626a8ce798004b8b3a198ddc40e48cab51e75e38b8960b4d6c56ab1655497528a3a1237ffec79329d4fb57311d70151ff11660244b5f797c251dc95236f5c0ecad1bdfadc9e6a0f1fcad92fd4384733613bfc80fe2e02784f5d4009ece584fad1f53c215edb5a1411e0e7acded1bbc106718a6830d31d0"], 0x38}, 0x1, 0x0, 0x0, 0x44008}, 0x4000000) getsockname$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 19:11:19 executing program 0: syz_open_dev$media(0x0, 0x1, 0x696a00) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd10673c876c699010000000000000025da3f0fc3ec6e26560000080049d2e181baf9459c5c953948c680"], 0x59) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x2, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000002000000c8040000e8000000e800000000000000e0030000e0030000e00300000400000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e800000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000697036746e6c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000000000000000000073797374656d5f753a6f626a6563745f723a70746d785f743a733000"/630], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x10, 0x0, 0xfff}, &(0x7f0000000240)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=0xeb}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10, 0xffff27f8, 0x401}, &(0x7f0000000080)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) dup3(r6, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) [ 827.409281][ C0] sd 0:0:1:0: [sg0] tag#1552 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 827.419921][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB: Test Unit Ready [ 827.426681][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.436614][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.446701][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.456728][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.466681][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.476687][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.486527][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.496373][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.506316][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.516169][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.526115][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.526241][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.546066][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.546174][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.546342][ C0] sd 0:0:1:0: [sg0] tag#1552 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 827.568945][T22494] No such timeout policy "syz1" [ 827.815139][T22509] ===================================================== [ 827.822156][T22509] BUG: KMSAN: uninit-value in ip_check_mc_rcu+0x2a9/0x690 [ 827.829290][T22509] CPU: 0 PID: 22509 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 827.837976][T22509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.848237][T22509] Call Trace: [ 827.851640][T22509] dump_stack+0x1c9/0x220 [ 827.855989][T22509] kmsan_report+0xf7/0x1e0 [ 827.860415][T22509] __msan_warning+0x58/0xa0 [ 827.865116][T22509] ip_check_mc_rcu+0x2a9/0x690 [ 827.869906][T22509] ip_route_output_key_hash_rcu+0x1cfd/0x38d0 [ 827.876023][T22509] ip_route_output_flow+0x1e1/0x3d0 [ 827.881270][T22509] ip_tunnel_xmit+0x130e/0x34f0 [ 827.886199][T22509] ipgre_xmit+0xfe7/0x1110 [ 827.890661][T22509] ? ipgre_close+0x240/0x240 [ 827.895260][T22509] dev_hard_start_xmit+0x531/0xab0 [ 827.900532][T22509] ? kmsan_get_metadata+0x11d/0x180 [ 827.905769][T22509] __dev_queue_xmit+0x37de/0x4220 [ 827.910829][T22509] dev_queue_xmit+0x4b/0x60 19:11:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 827.915362][T22509] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 827.920829][T22509] packet_sendmsg+0x8436/0x92f0 [ 827.920852][T22509] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 827.920897][T22509] ? kmsan_get_metadata+0x11d/0x180 [ 827.937158][T22509] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 827.943352][T22509] ? kmsan_get_metadata+0x4f/0x180 [ 827.948512][T22509] ? kmsan_set_origin_checked+0x95/0xf0 [ 827.954589][T22509] ? kmsan_get_metadata+0x4f/0x180 [ 827.959725][T22509] ? kmsan_internal_set_origin+0x75/0xb0 [ 827.965406][T22509] ? slabs_cpu_partial_show+0x3e0/0x790 [ 827.970983][T22509] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 827.976909][T22509] ? aa_sk_perm+0x83c/0xcd0 [ 827.981742][T22509] ? compat_packet_setsockopt+0x360/0x360 [ 827.987490][T22509] ____sys_sendmsg+0x12b6/0x1350 [ 827.992603][T22509] __sys_sendmsg+0x451/0x5f0 [ 827.997252][T22509] ? kmsan_copy_to_user+0x81/0x90 [ 828.002288][T22509] ? kmsan_get_metadata+0x11d/0x180 [ 828.007515][T22509] ? kmsan_get_metadata+0x11d/0x180 [ 828.012860][T22509] __se_sys_sendmsg+0x97/0xb0 [ 828.017590][T22509] __x64_sys_sendmsg+0x4a/0x70 [ 828.022360][T22509] do_syscall_64+0xb8/0x160 [ 828.027025][T22509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 828.032945][T22509] RIP: 0033:0x45b3b9 [ 828.036855][T22509] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.057006][T22509] RSP: 002b:00007f4362418c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.065545][T22509] RAX: ffffffffffffffda RBX: 00007f43624196d4 RCX: 000000000045b3b9 [ 828.073525][T22509] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 828.081711][T22509] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 828.089695][T22509] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 828.097701][T22509] R13: 00000000000009c4 R14: 00000000004cb36a R15: 000000000075bf2c [ 828.105692][T22509] [ 828.108066][T22509] Uninit was stored to memory at: [ 828.113111][T22509] kmsan_internal_chain_origin+0xad/0x130 [ 828.118830][T22509] __msan_chain_origin+0x50/0x90 [ 828.123762][T22509] ip_tunnel_xmit+0xc0a/0x34f0 [ 828.128626][T22509] ipgre_xmit+0xfe7/0x1110 [ 828.133040][T22509] dev_hard_start_xmit+0x531/0xab0 [ 828.138255][T22509] __dev_queue_xmit+0x37de/0x4220 [ 828.143285][T22509] dev_queue_xmit+0x4b/0x60 [ 828.147923][T22509] packet_sendmsg+0x8436/0x92f0 [ 828.152973][T22509] ____sys_sendmsg+0x12b6/0x1350 [ 828.157909][T22509] __sys_sendmsg+0x451/0x5f0 [ 828.162498][T22509] __se_sys_sendmsg+0x97/0xb0 [ 828.167241][T22509] __x64_sys_sendmsg+0x4a/0x70 [ 828.172011][T22509] do_syscall_64+0xb8/0x160 [ 828.176526][T22509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 828.182398][T22509] [ 828.184725][T22509] Uninit was stored to memory at: [ 828.189881][T22509] kmsan_internal_chain_origin+0xad/0x130 [ 828.195606][T22509] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 828.201714][T22509] kmsan_memcpy_metadata+0xb/0x10 [ 828.207091][T22509] __msan_memcpy+0x43/0x50 [ 828.211689][T22509] pskb_expand_head+0x38b/0x1b00 [ 828.216650][T22509] ipgre_xmit+0x6d0/0x1110 [ 828.221096][T22509] dev_hard_start_xmit+0x531/0xab0 [ 828.226446][T22509] __dev_queue_xmit+0x37de/0x4220 [ 828.231489][T22509] dev_queue_xmit+0x4b/0x60 [ 828.236011][T22509] packet_sendmsg+0x8436/0x92f0 [ 828.240859][T22509] ____sys_sendmsg+0x12b6/0x1350 [ 828.245808][T22509] __sys_sendmsg+0x451/0x5f0 [ 828.250396][T22509] __se_sys_sendmsg+0x97/0xb0 [ 828.255095][T22509] __x64_sys_sendmsg+0x4a/0x70 [ 828.259882][T22509] do_syscall_64+0xb8/0x160 [ 828.264391][T22509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 828.270270][T22509] [ 828.272757][T22509] Uninit was created at: [ 828.277194][T22509] kmsan_internal_poison_shadow+0x66/0xd0 [ 828.282932][T22509] kmsan_slab_alloc+0x8a/0xe0 [ 828.287806][T22509] __kmalloc_node_track_caller+0xb40/0x1200 [ 828.293707][T22509] __alloc_skb+0x2fd/0xac0 [ 828.298139][T22509] alloc_skb_with_frags+0x18c/0xa70 [ 828.303349][T22509] sock_alloc_send_pskb+0xada/0xc60 [ 828.308560][T22509] packet_sendmsg+0x656e/0x92f0 [ 828.313414][T22509] ____sys_sendmsg+0x12b6/0x1350 [ 828.318478][T22509] __sys_sendmsg+0x451/0x5f0 [ 828.325259][T22509] __se_sys_sendmsg+0x97/0xb0 [ 828.329928][T22509] __x64_sys_sendmsg+0x4a/0x70 [ 828.334700][T22509] do_syscall_64+0xb8/0x160 [ 828.339209][T22509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 828.345091][T22509] ===================================================== [ 828.352022][T22509] Disabling lock debugging due to kernel taint [ 828.358430][T22509] Kernel panic - not syncing: panic_on_warn set ... [ 828.365054][T22509] CPU: 0 PID: 22509 Comm: syz-executor.1 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 828.375131][T22509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.385200][T22509] Call Trace: [ 828.388501][T22509] dump_stack+0x1c9/0x220 [ 828.392827][T22509] panic+0x3d5/0xc3e [ 828.396899][T22509] kmsan_report+0x1df/0x1e0 [ 828.401404][T22509] __msan_warning+0x58/0xa0 [ 828.405909][T22509] ip_check_mc_rcu+0x2a9/0x690 [ 828.410678][T22509] ip_route_output_key_hash_rcu+0x1cfd/0x38d0 [ 828.416863][T22509] ip_route_output_flow+0x1e1/0x3d0 [ 828.422078][T22509] ip_tunnel_xmit+0x130e/0x34f0 [ 828.427079][T22509] ipgre_xmit+0xfe7/0x1110 [ 828.431523][T22509] ? ipgre_close+0x240/0x240 [ 828.436108][T22509] dev_hard_start_xmit+0x531/0xab0 [ 828.441244][T22509] ? kmsan_get_metadata+0x11d/0x180 [ 828.446454][T22509] __dev_queue_xmit+0x37de/0x4220 [ 828.451500][T22509] dev_queue_xmit+0x4b/0x60 [ 828.456019][T22509] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 828.461324][T22509] packet_sendmsg+0x8436/0x92f0 [ 828.466191][T22509] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 828.472007][T22509] ? kmsan_get_metadata+0x11d/0x180 [ 828.477226][T22509] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 828.483559][T22509] ? kmsan_get_metadata+0x4f/0x180 [ 828.488681][T22509] ? kmsan_set_origin_checked+0x95/0xf0 [ 828.494235][T22509] ? kmsan_get_metadata+0x4f/0x180 [ 828.499352][T22509] ? kmsan_internal_set_origin+0x75/0xb0 [ 828.504991][T22509] ? slabs_cpu_partial_show+0x3e0/0x790 [ 828.510861][T22509] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 828.516694][T22509] ? aa_sk_perm+0x83c/0xcd0 [ 828.521286][T22509] ? compat_packet_setsockopt+0x360/0x360 [ 828.527025][T22509] ____sys_sendmsg+0x12b6/0x1350 [ 828.532075][T22509] __sys_sendmsg+0x451/0x5f0 [ 828.536728][T22509] ? kmsan_copy_to_user+0x81/0x90 [ 828.541772][T22509] ? kmsan_get_metadata+0x11d/0x180 [ 828.546971][T22509] ? kmsan_get_metadata+0x11d/0x180 [ 828.552207][T22509] __se_sys_sendmsg+0x97/0xb0 [ 828.556906][T22509] __x64_sys_sendmsg+0x4a/0x70 [ 828.561672][T22509] do_syscall_64+0xb8/0x160 [ 828.566293][T22509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 828.572191][T22509] RIP: 0033:0x45b3b9 [ 828.576082][T22509] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.595689][T22509] RSP: 002b:00007f4362418c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.604100][T22509] RAX: ffffffffffffffda RBX: 00007f43624196d4 RCX: 000000000045b3b9 [ 828.612111][T22509] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 828.620100][T22509] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 828.628077][T22509] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 828.636056][T22509] R13: 00000000000009c4 R14: 00000000004cb36a R15: 000000000075bf2c [ 828.645947][T22509] Kernel Offset: 0x2b800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 828.657645][T22509] Rebooting in 86400 seconds..