0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xb13e7b37d9dfee48) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x5) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000180)={0xc025}) 05:58:07 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) [ 462.678995][ C1] sd 0:0:1:0: [sg0] tag#5264 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 462.689709][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB: Test Unit Ready [ 462.696606][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.706500][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.716407][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.726336][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.736208][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.746095][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.755992][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.766008][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.775891][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.785758][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.795632][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.805516][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.815383][ C1] sd 0:0:1:0: [sg0] tag#5264 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:08 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:08 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4454}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfe51) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xb13e7b37d9dfee48) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x5) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000180)={0xc025}) [ 463.421796][ T31] audit: type=1800 audit(1595311088.777:60): pid=13022 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:09 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) 05:58:09 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee0"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:09 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 464.341482][ C0] sd 0:0:1:0: [sg0] tag#5265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 464.352202][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB: Test Unit Ready [ 464.359048][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.368908][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.378748][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.388600][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.398454][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.408307][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.418167][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.428006][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:09 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:09 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x90}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:09 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) [ 464.437892][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.447734][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.457634][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.467491][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.477352][ C0] sd 0:0:1:0: [sg0] tag#5265 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:09 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 464.570848][T13057] net_ratelimit: 23 callbacks suppressed [ 464.570875][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 05:58:10 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:10 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x90}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0xb, 0x75be0100) [ 464.943443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:10 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:10 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee0"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:10 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x90}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0xb, 0x75be0100) [ 465.437113][T13078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.445745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.511667][ C0] sd 0:0:1:0: [sg0] tag#5269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 465.522377][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB: Test Unit Ready [ 465.529263][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.539117][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.548960][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.558885][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.568742][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.578604][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.588512][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.598381][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.608242][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.618188][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.628056][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.637896][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.647735][ C0] sd 0:0:1:0: [sg0] tag#5269 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:11 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:11 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) [ 466.070423][T13092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:11 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 466.197580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.295942][ T31] audit: type=1800 audit(1595311091.656:61): pid=13085 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 05:58:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:12 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:12 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:12 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 467.558719][T13121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.559515][ C0] sd 0:0:1:0: [sg0] tag#5270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 467.567409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.577474][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB: Test Unit Ready [ 467.577661][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.602223][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.612185][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.622064][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.631908][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.641746][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.651596][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.661449][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.671345][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.681219][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.691084][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.700944][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.710789][ C0] sd 0:0:1:0: [sg0] tag#5270 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:13 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:13 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:13 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:13 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) [ 468.334204][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.342745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:13 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x7fbffffc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:14 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4454}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfe51) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000fbdbdf", @ANYRES32, @ANYBLOB="08007bcd6c8b734465c42e9d36204d3e2e0cfd2748af6725dfa7a8cabb6607252a06d24de51ee84373f24953256c9d943917f0f6adccb49faac3e6be1681c8248f4af555efa4d227aefa33e2f72bfbea5a595867e80f31f1c3a77d87a0cca2602145caf67e8106b79d7ec02dbfcbe42ea76c2f8488beff0e50d936c9fcd9e76d9827e8f0f4d6fbb394c47775c2a57eac25c349d2b365d3943c33037c0ad8cbc23f293fc84f607f7e3a085d027435ea8ed4bd6b0c1fca056a6c4086423a4d7fa265a71f4a7b8fc9dc705041c404dcb1ea0451cf8bcdd52b673de1", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001cdf78dcff73fe68a18f295de654036f4dbb7b6", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x58}}, 0xb13e7b37d9dfee48) ioctl$PPPIOCATTACH(r1, 0x4004743d, 0xffffffffffffffff) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000180)={0xc025, 0x2}) 05:58:14 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:14 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:14 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:14 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x7fbffffc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 469.501937][ C1] sd 0:0:1:0: [sg0] tag#5280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.512774][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB: Test Unit Ready [ 469.519653][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.529695][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.539684][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.549612][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.559621][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.569540][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.579459][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.589405][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.599361][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.609302][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.619181][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.629179][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.639058][ C1] sd 0:0:1:0: [sg0] tag#5280 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:15 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:15 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:15 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x7fbffffc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 469.868628][T13172] net_ratelimit: 2 callbacks suppressed [ 469.868656][T13172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.883116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.215741][ T31] audit: type=1800 audit(1595311095.575:62): pid=13161 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 [ 470.413608][T13188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.429624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:15 executing program 1: 05:58:15 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:15 executing program 1: 05:58:15 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:15 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:15 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:16 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:16 executing program 1: [ 470.752508][ C0] sd 0:0:1:0: [sg0] tag#5281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.763149][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB: Test Unit Ready [ 470.769932][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.779841][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.789753][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.799634][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.809522][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.819430][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.829354][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.839205][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.849052][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.858940][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.868788][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.878632][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 470.887219][T13201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.888535][ C0] sd 0:0:1:0: [sg0] tag#5281 CDB[c0]: 00 00 00 00 00 00 00 00 [ 470.897009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:16 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:16 executing program 1: 05:58:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:17 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:17 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:17 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:17 executing program 1: 05:58:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) [ 471.999771][ C0] sd 0:0:1:0: [sg0] tag#5290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 472.010485][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB: Test Unit Ready [ 472.017296][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.027149][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.036997][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.046898][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.056749][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.066586][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.076431][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.086248][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:17 executing program 1: 05:58:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:17 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 472.096097][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.105938][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.115778][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.125605][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 472.135471][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:17 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:17 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 472.715236][T13250] device ip6tnl1 entered promiscuous mode [ 472.756125][ T31] audit: type=1800 audit(1595311098.114:63): pid=13234 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:18 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 05:58:18 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') 05:58:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:18 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:18 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) [ 473.123515][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 473.187175][ C0] sd 0:0:1:0: [sg0] tag#5291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 473.197809][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB: Test Unit Ready [ 473.204726][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.214631][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.224537][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.234466][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.244350][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.254256][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.264233][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.274167][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 473.284054][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.293939][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.303864][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.313776][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 473.323565][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:18 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:18 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 473.659615][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:19 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) 05:58:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:19 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:19 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fffffff, 0x0) 05:58:19 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 474.242105][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:19 executing program 1: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) write$snapshot(0xffffffffffffffff, &(0x7f0000000180), 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x4424c0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) [ 474.292030][ C0] sd 0:0:1:0: [sg0] tag#5294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.302667][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB: Test Unit Ready [ 474.309515][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.319422][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.329345][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.339256][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.349156][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.359047][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.368926][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.378823][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) [ 474.388704][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.398603][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.408523][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.418467][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 474.428340][ C0] sd 0:0:1:0: [sg0] tag#5294 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:19 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fffffff, 0x0) 05:58:20 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 474.772068][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0xc0) 05:58:20 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 475.062686][ T31] audit: type=1800 audit(1595311100.414:64): pid=13299 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:20 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) 05:58:20 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb3"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) [ 475.323964][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.399809][T13328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.408553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.439943][ C1] sd 0:0:1:0: [sg0] tag#5295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 475.450686][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB: Test Unit Ready [ 475.457524][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.467435][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.477362][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.487256][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.497130][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.507030][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.516912][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.526810][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003f000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0fa22e0fc79e0000000066b8e7008ed8660f2fc10f788c3d0f8379e366b82f018ee8f083326b0f090f20e035000004000f22e03ef23e0f0174dcb6", 0x3b}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 475.536674][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.546538][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.556500][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.566378][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.576356][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:21 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) 05:58:21 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) [ 476.068351][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.244896][T13347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.253574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:21 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:21 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb3"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 05:58:22 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 476.740481][ C0] sd 0:0:1:0: [sg0] tag#5303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 476.751121][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB: Test Unit Ready [ 476.758022][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.767939][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.777822][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.787804][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.797688][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.807587][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.817459][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.827357][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.837276][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.847183][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.857117][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.867039][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.876947][ C0] sd 0:0:1:0: [sg0] tag#5303 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:22 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:22 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:58:22 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 05:58:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) [ 477.351978][T13375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.361042][T13375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.468258][T13375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.518571][ T31] audit: type=1800 audit(1595311102.873:65): pid=13357 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 [ 477.558282][T13372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:23 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0), 0x8) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) [ 477.608850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:23 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) 05:58:23 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb3"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 477.927192][T13390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:23 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 478.132623][ C1] sd 0:0:1:0: [sg0] tag#5304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 478.143450][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB: Test Unit Ready [ 478.150352][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.160325][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.170321][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x6, &(0x7f0000000b40), 0x61}}], 0x2, 0x0) [ 478.180258][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.190139][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.200028][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.209929][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.219803][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 478.229698][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.239700][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.249607][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.259784][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.269616][ C1] sd 0:0:1:0: [sg0] tag#5304 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/160, 0xa0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 05:58:23 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 05:58:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) keyctl$chown(0x4, 0x0, 0x0, r1) 05:58:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 05:58:24 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:24 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$nl80211(0x0) write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) syz_open_dev$sg(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) ftruncate(r2, 0x80006) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 479.224449][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 479.407316][ C1] sd 0:0:1:0: [sg0] tag#5253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 479.418006][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB: Test Unit Ready [ 479.424856][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.434747][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.441795][T13435] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 479.444668][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.472775][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.482678][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.492560][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.502450][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.512335][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.522173][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.532093][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.542136][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 05:58:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 479.552103][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 479.562021][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 479.760496][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:25 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0xfffffffffffffe3b) creat(0x0, 0x0) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xb9cc811c337c8669) r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r1, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 05:58:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}], 0x1, 0x0) [ 480.164517][ T31] audit: type=1800 audit(1595311105.512:66): pid=13433 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 [ 480.221458][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:25 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:25 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 480.460459][T13459] net_ratelimit: 24 callbacks suppressed [ 480.460483][T13459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.475622][T13459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:25 executing program 5: [ 480.518292][T13459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.559609][T13460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.568857][T13460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.610028][ C1] sd 0:0:1:0: [sg0] tag#5254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 480.620862][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB: Test Unit Ready [ 480.627661][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.637714][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.647627][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.657515][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.667715][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.671877][T13466] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 480.677788][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.697272][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.707568][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.717571][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.727726][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.737828][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.747979][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 480.758096][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[c0]: 00 00 00 00 00 00 00 00 [ 480.796725][T13458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}], 0x1, 0x0) 05:58:26 executing program 1: 05:58:26 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=""/160, 0xa0}, 0xffffffff}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) [ 481.245796][T13470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.255144][T13470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.320057][T13470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.345082][T13478] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 481.382676][T13476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/160, 0xa0}, 0xffffffff}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/ttyS3\x00', 0x100, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 05:58:26 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:27 executing program 5: ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000040)={0x2, 0x7ffffeff}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x141401, 0x0) write$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 05:58:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}], 0x1, 0x0) [ 481.756928][ C0] sd 0:0:1:0: [sg0] tag#5258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 481.768126][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB: Test Unit Ready [ 481.774914][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.784785][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.794841][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.804936][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.815068][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.824928][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.835275][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.845751][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:27 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 481.855791][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.865847][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.875716][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.885829][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 481.895686][ C0] sd 0:0:1:0: [sg0] tag#5258 CDB[c0]: 00 00 00 00 00 00 00 00 [ 482.167138][T13497] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 05:58:27 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 482.550568][ T31] audit: type=1800 audit(1595311107.902:67): pid=13492 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xffffa88f) 05:58:28 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 482.838741][T13514] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:28 executing program 5: 05:58:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 483.030956][ C0] sd 0:0:1:0: [sg0] tag#5259 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 483.041888][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB: Test Unit Ready [ 483.048893][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.058855][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.068953][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.078967][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.089345][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.099647][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.109905][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.119786][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.129978][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.139847][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.149887][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.159852][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.170038][ C0] sd 0:0:1:0: [sg0] tag#5259 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:28 executing program 1: 05:58:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:28 executing program 5: 05:58:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 05:58:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 483.469504][T13528] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:28 executing program 1: 05:58:29 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:29 executing program 5: 05:58:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x0) 05:58:29 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:29 executing program 1: [ 484.008780][T13539] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:29 executing program 5: [ 484.243805][ C1] sd 0:0:1:0: [sg0] tag#5266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.254718][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB: Test Unit Ready [ 484.261510][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.271622][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.281531][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:29 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe80", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 484.291755][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.301628][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.311857][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.321784][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.331865][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.341719][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.351807][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.361711][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.371888][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.381766][ C1] sd 0:0:1:0: [sg0] tag#5266 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:29 executing program 1: 05:58:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x0) 05:58:30 executing program 5: 05:58:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 484.700239][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 484.710162][T13552] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 485.015695][ T31] audit: type=1800 audit(1595311110.371:68): pid=13546 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:30 executing program 1: 05:58:30 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe80", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:30 executing program 5: 05:58:30 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x0) [ 485.363317][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 485.373617][T13564] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 485.509005][ C0] sd 0:0:1:0: [sg0] tag#5267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 485.519679][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB: Test Unit Ready [ 485.526678][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.536689][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.546895][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.556810][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.567405][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.577321][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.587628][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.597562][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) 05:58:31 executing program 1: 05:58:31 executing program 5: [ 485.607677][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.617773][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.627841][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.637835][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 485.647906][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe80", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 485.847687][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 485.857335][T13573] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 485.933461][T13576] net_ratelimit: 41 callbacks suppressed [ 485.933487][T13576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:31 executing program 5: 05:58:31 executing program 1: 05:58:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa08000800010000000800140020", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:31 executing program 5: [ 486.266930][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 486.276352][T13585] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:31 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc04542"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 486.375923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.386052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.397137][T13575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.406912][T13575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa08000800010000000800140020", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:31 executing program 1: [ 486.668910][ C1] sd 0:0:1:0: [sg0] tag#5272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 486.680052][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB: Test Unit Ready [ 486.687336][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.697344][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.707503][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.717527][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.727793][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.737742][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.747849][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.757791][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) 05:58:32 executing program 5: [ 486.768012][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.778051][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.788302][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.791136][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 486.798450][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.798547][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[c0]: 00 00 00 00 00 00 00 00 [ 486.828426][T13593] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 486.996052][T13598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:32 executing program 1: 05:58:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 487.097208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.106462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.125464][T13595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:32 executing program 5: 05:58:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) 05:58:32 executing program 1: [ 487.433447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:32 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa08000800010000000800140020", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 487.473831][ T31] audit: type=1800 audit(1595311112.821:69): pid=13591 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) 05:58:33 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:33 executing program 5: 05:58:33 executing program 1: 05:58:33 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff020000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 487.989066][ C1] sd 0:0:1:0: [sg0] tag#5273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 487.999838][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB: Test Unit Ready [ 488.006923][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.016871][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.027137][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.037158][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.047316][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.057336][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.067480][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.077407][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:33 executing program 5: 05:58:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) [ 488.087616][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.097801][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.108094][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.118039][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.128156][ C1] sd 0:0:1:0: [sg0] tag#5273 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:33 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:33 executing program 1: 05:58:33 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff020000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:34 executing program 5: 05:58:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) 05:58:34 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:34 executing program 1: 05:58:34 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff020000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) 05:58:34 executing program 5: 05:58:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 489.177020][ C1] sd 0:0:1:0: [sg0] tag#5284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 489.187966][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB: Test Unit Ready [ 489.194797][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.204936][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.214878][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.225246][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.235168][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.245250][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.255272][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.265448][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.275566][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.285705][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.295722][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.305944][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.316139][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:34 executing program 5: 05:58:34 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff0200"/102, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) 05:58:34 executing program 1: 05:58:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fchdir(r0) 05:58:35 executing program 5: r0 = socket(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000000), 0x1c8, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x3c8}, 0x0) [ 489.964461][ T31] audit: type=1800 audit(1595311115.321:70): pid=13649 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:35 executing program 1: 05:58:35 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff0200"/102, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:35 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) 05:58:35 executing program 5: [ 490.348554][T13674] __nla_validate_parse: 10 callbacks suppressed [ 490.348584][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 490.365559][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 490.458791][ C1] sd 0:0:1:0: [sg0] tag#5285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 490.469855][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB: Test Unit Ready [ 490.476845][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.486973][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.497181][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.507401][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.517419][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.527560][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.537481][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.547588][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:36 executing program 1: [ 490.557922][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.568080][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.578031][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.588210][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.598406][ C1] sd 0:0:1:0: [sg0] tag#5285 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) 05:58:36 executing program 5: 05:58:36 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff0200"/102, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 490.934450][T13686] net_ratelimit: 29 callbacks suppressed [ 490.934476][T13686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.123207][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 491.132852][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:36 executing program 1: 05:58:36 executing program 5: 05:58:36 executing program 1: [ 491.342849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.352824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.379144][T13685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 491.517190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:36 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x1, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:58:36 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:36 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) 05:58:37 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioperm(0x0, 0x2, 0x0) clone(0x68002100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) [ 491.789777][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 491.799325][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:37 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 491.881939][T13711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.891181][T13711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.908037][ C0] sd 0:0:1:0: [sg0] tag#5289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 491.918677][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB: Test Unit Ready 05:58:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc0902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val={0x0, 0x3, 0x0, 0x5}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x8}}}}}, 0x62) [ 491.925434][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.935269][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.945106][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.954993][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.964843][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.974683][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.984522][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 491.994368][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 492.004210][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 492.014035][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 492.023887][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 492.033751][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 492.043488][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[c0]: 00 00 00 00 00 00 00 00 [ 492.072344][T13715] IPVS: ftp: loaded support on port[0] = 21 [ 492.094092][T13716] ptrace attach of "/root/syz-executor.5"[13715] was attempted by "/root/syz-executor.5"[13716] [ 492.134005][T13711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.178212][T13718] IPVS: ftp: loaded support on port[0] = 21 [ 492.181083][T13710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.192894][T13710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:58:37 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) [ 492.530341][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 492.539444][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 492.593369][ T31] audit: type=1800 audit(1595311117.940:71): pid=13709 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:38 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 492.912970][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 492.922801][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 492.963828][ C0] sd 0:0:1:0: [sg0] tag#5290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 492.974461][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB: Test Unit Ready [ 492.981085][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 492.991069][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.000991][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.010839][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.020680][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.030542][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.040419][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.050266][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:38 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 493.060116][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.069972][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.079823][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.089631][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 493.099474][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 493.279355][T13759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 493.585127][T13737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 493.692586][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 493.702153][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc0902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val={0x0, 0x3, 0x0, 0x5}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x8}}}}}, 0x62) 05:58:39 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:39 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff020000000000000000000000000001080001", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 494.295873][T13793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 494.378504][ C1] sd 0:0:1:0: [sg0] tag#5297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 494.389340][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB: Test Unit Ready [ 494.396196][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.406146][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.416127][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.426249][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.436200][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.446127][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.456080][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.466037][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.476072][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.486055][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.496005][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.505933][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 494.515876][ C1] sd 0:0:1:0: [sg0] tag#5297 CDB[c0]: 00 00 00 00 00 00 00 00 [ 495.142834][ T31] audit: type=1800 audit(1595311120.490:72): pid=13797 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 05:58:41 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) dup2(r0, r1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x2000003, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e1e, 0x0, @local}, 0x1c) sendto$inet6(r2, &(0x7f0000000100)="88a467037e3f0c6e877801d6a771c795ce237f0bb2e2b93d2663850756360723d0dcceb5f0a49b1af67d1caa1187f196e278df06fc282a88b8d45e0f7d7e16d63786cea327dd1341574c2a50a49e6ed1286436087a1ed45c9cd66f9590f4d559cc19ea1c4bb3872a496f0656b1c64d376ac5184daa11b62d79525f4dd5f6e174d83c39e6ecec8bebc2b39104b5046f80f89d51a8fc140e5d7fabfce8010200a30a7d0f2559d6da2a01a7b4f41dbfe96b551f4e45554b3a33650ec13ac43d6c0845436832ed9067fb306dd4631fdf01c5134752ce818c6bb845181554ea716567b893233baae4ac8fb94209228c8af3ba610e6ce9059bd9b1ea90e5b238391af40543aceb6bef95d1699b96fc5c1b35b9af03973e19d3911c9c94a77356e02faf7ae33059a301e8b0710fb6870f7ed1e4beb5c104f7b18f2748c88bde34d57243eeb7f9c4bb09a5c1110222539cf800f85ad59baf4ad987ac800ad979ca60f2e997c4ab317ecbe731d437312eef68be35c4b9a376b6d444822753d80ed48e3e8267266a15f25c74354e1ddac5e679471e81", 0x191, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$hwrng(0xffffff9c, 0x0, 0x121200, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) 05:58:41 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:41 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff020000000000000000000000000001080001", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc0902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val={0x0, 0x3, 0x0, 0x5}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x8}}}}}, 0x62) 05:58:41 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 495.984018][T13812] __nla_validate_parse: 1 callbacks suppressed [ 495.984048][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 496.037460][ C1] sd 0:0:1:0: [sg0] tag#5298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 496.048241][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB: Test Unit Ready [ 496.055083][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.065047][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.075032][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.080440][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 496.084978][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.101860][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.111778][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.121723][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.131727][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.141642][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.151630][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.161518][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.171398][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.181291][ C1] sd 0:0:1:0: [sg0] tag#5298 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:41 executing program 3: r0 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) prctl$PR_GET_TIMERSLACK(0x1e) [ 496.518474][T13815] net_ratelimit: 8 callbacks suppressed [ 496.518509][T13815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 05:58:41 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff020000000000000000000000000001080001", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:41 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x1, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 496.742199][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:42 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x3, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 05:58:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc0902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val={0x0, 0x3, 0x0, 0x5}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x8}}}}}, 0x62) 05:58:42 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:42 executing program 5: 05:58:42 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:42 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 497.186264][T13849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 497.277012][T13854] Can't find ip_set type  [ 497.278264][ C1] sd 0:0:1:0: [sg0] tag#5303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 497.292232][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB: Test Unit Ready [ 497.299002][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.308964][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.318847][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.328788][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.338680][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.348569][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.358443][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.358546][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.358653][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.358758][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.358860][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.358966][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 497.359053][ C1] sd 0:0:1:0: [sg0] tag#5303 CDB[c0]: 00 00 00 00 00 00 00 00 [ 497.426411][T13849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 05:58:42 executing program 3: 05:58:42 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') sendfile(r0, r1, &(0x7f0000000240)=0x380, 0x4000000000dc) 05:58:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') read$rfkill(r0, 0x0, 0x0) [ 498.062359][ T31] audit: type=1800 audit(1595311123.419:73): pid=13858 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/145, 0x91}], 0x1, 0x80000001) 05:58:43 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:43 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc0902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) 05:58:43 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:43 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = dup2(r0, r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x40106614, 0x0) 05:58:43 executing program 5: [ 498.564915][T13886] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 498.568460][ C0] sd 0:0:1:0: [sg0] tag#5304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 498.582819][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB: Test Unit Ready [ 498.589615][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.599522][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.609417][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.619244][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.629092][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.638928][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.648761][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:44 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 498.658585][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.668441][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.678291][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.688134][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.697997][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 498.707821][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:44 executing program 3: 05:58:44 executing program 5: 05:58:44 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:44 executing program 3: 05:58:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:44 executing program 5: [ 499.394994][T13886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 05:58:44 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc0902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$nl_route(0x10, 0x3, 0x0) 05:58:45 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:45 executing program 3: 05:58:45 executing program 5: [ 499.791152][ C0] sd 0:0:1:0: [sg0] tag#5251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 499.801775][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB: Test Unit Ready [ 499.808585][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.818433][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.828278][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.838193][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.848052][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.857904][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.867748][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.877596][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:45 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 499.887439][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.897286][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.907154][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.916996][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 499.926896][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:45 executing program 3: 05:58:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc0902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) 05:58:45 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:45 executing program 5: 05:58:45 executing program 3: 05:58:45 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 500.566929][ T31] audit: type=1800 audit(1595311125.929:74): pid=13911 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:46 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 501.036987][ C0] sd 0:0:1:0: [sg0] tag#5252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 501.047658][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB: Test Unit Ready [ 501.054435][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.064303][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.074213][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.084137][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.094029][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.103922][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.113902][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.123813][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.133577][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.143487][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.154075][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.163964][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 501.173871][ C0] sd 0:0:1:0: [sg0] tag#5252 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:46 executing program 3: 05:58:46 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) 05:58:46 executing program 5: 05:58:46 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:46 executing program 3: 05:58:47 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff0000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:47 executing program 5: 05:58:47 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) 05:58:47 executing program 3: [ 501.848191][T13950] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:47 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:47 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) 05:58:47 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff0000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:47 executing program 5: 05:58:47 executing program 3: [ 502.311890][T13968] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 502.317408][ C1] sd 0:0:1:0: [sg0] tag#5255 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 502.331943][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB: Test Unit Ready [ 502.338684][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.348572][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.358508][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.368400][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.378276][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.388157][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.398038][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.407920][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.417798][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.427674][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.437588][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.447477][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.457358][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:47 executing program 5: 05:58:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) 05:58:47 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff0000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:48 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x0, r5}, 0x10) [ 502.844426][T13977] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8090ae81, &(0x7f0000000400)) 05:58:48 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff00000000200000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 503.095832][ T31] audit: type=1800 audit(1595311128.459:75): pid=13967 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 [ 503.200087][T13987] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:48 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) 05:58:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8090ae81, &(0x7f0000000400)) 05:58:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff01fa000000000f000000080000000500000001000000000094332d6e00000000000020000100000a"], 0xb8}}, 0x0) 05:58:48 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff00000000200000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 503.507030][ C0] sd 0:0:1:0: [sg0] tag#5256 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 503.517717][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB: Test Unit Ready [ 503.524560][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.534453][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.544349][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.554291][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.564167][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.574047][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.583936][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.593833][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) [ 503.603605][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.613520][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.623423][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.633336][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.643248][ C0] sd 0:0:1:0: [sg0] tag#5256 CDB[c0]: 00 00 00 00 00 00 00 00 [ 503.679502][T14008] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:49 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff00000000200000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff0107000000000f000000080000000500000001000000000094332d6e00000000000020000100000a"], 0xb8}}, 0x0) 05:58:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) [ 504.082436][T14015] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:49 executing program 3: 05:58:49 executing program 5: 05:58:50 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) 05:58:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:50 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff00000000200000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x80e85411) 05:58:50 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:50 executing program 5: pipe(&(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) epoll_create1(0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000100)=0x7, 0x4) io_uring_setup(0x370, &(0x7f00000002c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 504.764213][T14031] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 504.835158][ C0] sd 0:0:1:0: [sg0] tag#5267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 504.845902][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB: Test Unit Ready [ 504.852544][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.862534][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.872441][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.882416][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.892302][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.902231][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.912156][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.922084][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:50 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) [ 504.932049][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.941968][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.951884][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.961792][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 504.971683][ C0] sd 0:0:1:0: [sg0] tag#5267 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETSNDBUF(r0, 0x8924, 0x0) 05:58:50 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff00000000200000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 505.301328][T14047] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 05:58:50 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff00000000200000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 505.602874][T14053] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 505.619134][ T31] audit: type=1800 audit(1595311130.979:76): pid=14039 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:51 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) 05:58:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:51 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:58:51 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff0000000020000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:51 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 506.018796][T14065] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 506.113840][ C1] sd 0:0:1:0: [sg0] tag#5268 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 506.124684][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB: Test Unit Ready [ 506.131298][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.141331][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.151226][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.161136][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.171017][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.180904][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.190780][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.200668][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) [ 506.210511][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.220383][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.230290][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.240176][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 506.250051][ C1] sd 0:0:1:0: [sg0] tag#5268 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:51 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff0000000020000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 05:58:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:52 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff0000000020000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:52 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 507.166229][T14092] __nla_validate_parse: 1 callbacks suppressed [ 507.166262][T14092] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 507.202229][ C0] sd 0:0:1:0: [sg0] tag#5271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 05:58:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) [ 507.212920][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB: Test Unit Ready [ 507.219764][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.229680][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.239548][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.249459][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.259312][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.269173][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.279047][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.288931][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.298804][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.308730][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.318595][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.328469][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.338328][ C0] sd 0:0:1:0: [sg0] tag#5271 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:58:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:53 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 05:58:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 508.084083][ T31] audit: type=1800 audit(1595311133.328:77): pid=14094 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:53 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) [ 508.480746][ C1] sd 0:0:1:0: [sg0] tag#5272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.491442][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB: Test Unit Ready [ 508.498258][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.508167][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.518034][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.527920][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.537791][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.547670][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.557555][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.567415][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:53 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 508.577280][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.587146][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.597019][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.606877][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.616744][ C1] sd 0:0:1:0: [sg0] tag#5272 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 05:58:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:58:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:54 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x4, 0x0) r2 = dup2(r0, r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast1}}}}) 05:58:54 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x0, 0x2710}}, 0x18) 05:58:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:55 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 509.928705][ C0] sd 0:0:1:0: [sg0] tag#5287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 509.939351][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB: Test Unit Ready [ 509.946139][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.956055][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.966001][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.975938][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.985976][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.995874][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.005774][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.015679][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.025688][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.035591][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.045441][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.055322][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.065191][ C0] sd 0:0:1:0: [sg0] tag#5287 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045565, &(0x7f0000000140)) 05:58:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 510.683324][ T31] audit: type=1800 audit(1595311136.038:78): pid=14155 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:58:56 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000380)=[@request_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:58:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:56 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:58:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x190, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x190}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x369}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 511.167353][ C0] sd 0:0:1:0: [sg0] tag#5288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 511.177970][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB: Test Unit Ready [ 511.184786][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.194655][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.204497][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.214398][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.224247][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.234110][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.243944][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.253807][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:58:56 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) [ 511.263562][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.273409][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.283235][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.293110][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.302995][ C0] sd 0:0:1:0: [sg0] tag#5288 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x180, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x180}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x369}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:57 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 512.271501][ C1] sd 0:0:1:0: [sg0] tag#5294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 512.282171][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB: Test Unit Ready [ 512.289027][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.298938][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.308824][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.318754][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.328635][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.338528][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.348425][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.358305][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.368196][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.378084][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.387957][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.397833][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.407717][ C1] sd 0:0:1:0: [sg0] tag#5294 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:58:58 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 513.077569][ T31] audit: type=1800 audit(1595311138.438:79): pid=14208 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:58:58 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:58:58 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x0, &(0x7f00000002c0)) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 513.545836][ C1] sd 0:0:1:0: [sg0] tag#5295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 513.556504][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB: Test Unit Ready [ 513.563134][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.573187][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.583074][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.593011][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.602900][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.612782][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.622686][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.632585][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.642497][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.652388][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.662291][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.672196][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 513.682044][ C1] sd 0:0:1:0: [sg0] tag#5295 CDB[c0]: 00 00 00 00 00 00 00 00 05:58:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:58:59 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0xb, 0x75be0100) 05:58:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:58:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x400c55cb, &(0x7f0000000140)={0xc016}) 05:58:59 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x75be0100) 05:58:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:58:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000007c8008801c00010000000000000000000000000000000000000000000700000012000200000000000000000000000000000000001c0001000000000000000000000000000000000000000000030000000a00020000000000000000001c00010000000000000000000000000000000000000000000000000004000200080001007265640008010200040102006b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae696ecd2e676185f433e9a89a23"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000000000002900f3ff3100000000000000000000006e00ffffca000002", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', r8, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', r9}) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:58:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:59:00 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x75be0100) 05:59:00 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x0, &(0x7f00000002c0)) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:00 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x75be0100) 05:59:00 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x0) 05:59:00 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:59:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 515.677966][ T31] audit: type=1800 audit(1595311141.038:80): pid=14278 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000000000002900f3ff3100000000000000000000006e00ffffca000002", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', r8, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', r9}) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:01 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x0) 05:59:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:01 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x0, &(0x7f00000002c0)) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 516.069558][ C0] sd 0:0:1:0: [sg0] tag#5304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 516.080268][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB: Test Unit Ready [ 516.087106][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.097047][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.106950][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.116894][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.126804][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.136715][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.146616][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.156553][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000000000002900f3ff3100000000000000000000006e00ffffca000002", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', r8, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', r9}) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 516.166449][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.176350][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.186248][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.196134][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 516.206022][ C0] sd 0:0:1:0: [sg0] tag#5304 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:59:01 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x0) 05:59:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:59:02 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[0x0]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 517.231190][ C1] sd 0:0:1:0: [sg0] tag#5311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 517.241934][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB: Test Unit Ready [ 517.248779][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.258648][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.268594][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.278482][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.288383][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.298253][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.308118][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.317971][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000007c8008801c00010000000000000000000000000000000000000000000700000012000200000000000000000000000000000000001c0001000000000000000000000000000000000000000000030000000a00020000000000000000001c00010000000000000000000000000000000000000000000000000004000200080001007265640008010200040102006b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae696ecd2e676185f433e9a89a23"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000000000002900f3ff3100000000000000000000006e00ffffca000002", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', r8, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', r9}) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 517.327822][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.337701][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.347588][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.357448][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 517.367308][ C1] sd 0:0:1:0: [sg0] tag#5311 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 517.998757][ T31] audit: type=1800 audit(1595311143.357:81): pid=14322 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:59:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000280)=[@acquire_done, @request_death], 0x0, 0x0, 0x0}) 05:59:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000007c8008801c00010000000000000000000000000000000000000000000700000012000200000000000000000000000000000000001c0001000000000000000000000000000000000000000000030000000a00020000000000000000001c00010000000000000000000000000000000000000000000000000004000200080001007265640008010200040102006b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae696ecd2e676185f433e9a89a23"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000000000002900f3ff3100000000000000000000006e00ffffca000002", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', r8, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', r9}) 05:59:03 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[0x0]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x4, 0x0) r2 = dup2(r0, r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8923, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) [ 518.448951][ C1] sd 0:0:1:0: [sg0] tag#5248 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 518.459710][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB: Test Unit Ready [ 518.466558][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.476445][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.486311][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.496244][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.506122][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.515987][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.525857][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.535722][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.545595][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.555465][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.565333][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.575216][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.585071][ C1] sd 0:0:1:0: [sg0] tag#5248 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:04 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 519.147238][T14362] IPVS: ftp: loaded support on port[0] = 21 [ 519.193560][T14363] input: syz1 as /devices/virtual/input/input7 05:59:04 executing program 0: unshare(0x44000600) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 05:59:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:59:04 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:04 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[0x0]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 519.723183][ C1] sd 0:0:1:0: [sg0] tag#5254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 519.733970][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB: Test Unit Ready [ 519.740602][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.750569][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.760423][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.770304][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.780320][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.790218][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.800129][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.810036][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.819945][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.829821][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.839709][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.849604][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 519.859473][ C1] sd 0:0:1:0: [sg0] tag#5254 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000000000002900f3ff3100000000000000000000006e00ffffca000002", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', r8, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:05 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:05 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 520.498482][ T31] audit: type=1800 audit(1595311145.857:82): pid=14396 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 520.602129][T14362] IPVS: ftp: loaded support on port[0] = 21 05:59:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 520.666885][T14363] input: syz1 as /devices/virtual/input/input8 05:59:06 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:06 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 521.208240][ C1] sd 0:0:1:0: [sg0] tag#5255 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 521.218906][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB: Test Unit Ready [ 521.225734][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.235607][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.245492][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.255364][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.265249][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.275127][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.285000][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.294869][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.304746][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.314611][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.324501][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.334371][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 521.344235][ C1] sd 0:0:1:0: [sg0] tag#5255 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) clone(0x1000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 05:59:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000007c8008801c00010000000000000000000000000000000000000000000700000012000200000000000000000000000000000000001c0001000000000000000000000000000000000000000000030000000a00020000000000000000001c00010000000000000000000000000000000000000000000000000004000200080001007265640008010200040102006b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae696ecd2e676185f433e9a89a23"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', r8, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:06 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 521.660877][ T31] audit: type=1326 audit(1595311147.017:83): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14459 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f01a code=0x0 05:59:07 executing program 0: 05:59:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) [ 522.137410][ T1447] tipc: TX() has been purged, node left! 05:59:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c0000000001ffc3917d110000000000000000003c0004002c000100140003000000000000000000000000000000000114000400fe8000000000000000000000000000bb0c0002000500010000000000240002000c000200050001000000001a140001"], 0x8c}}, 0x0) 05:59:07 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 522.422788][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 522.432347][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 522.442383][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 522.526880][ C1] sd 0:0:1:0: [sg0] tag#5259 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 522.538062][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB: Test Unit Ready [ 522.544931][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.554803][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.564755][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.574708][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.584599][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.594474][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.604352][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.614237][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 522.624114][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.633976][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.643860][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.653610][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 522.663477][ C1] sd 0:0:1:0: [sg0] tag#5259 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000240)) 05:59:08 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:59:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:08 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff01fa000000000f000000080000000500000001000000000094332d6e00000000000020000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2b, 0x0, 0x0) 05:59:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 523.310511][ T31] audit: type=1800 audit(1595311148.667:84): pid=14484 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x60, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfb}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x2804c014) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 05:59:08 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 05:59:09 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r3], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r3, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000007c8008801c00010000000000000000000000000000000000000000000700000012000200000000000000000000000000000000001c0001000000000000000000000000000000000000000000030000000a00020000000000000000001c00010000000000000000000000000000000000000000000000000004000200080001007265640008010200040102006b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae696ecd2e676185f433e9a89a23"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 524.055132][ C1] sd 0:0:1:0: [sg0] tag#5260 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 524.065926][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB: Test Unit Ready [ 524.072546][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.082536][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.092415][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.102410][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.112307][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.122191][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.132081][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.141977][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.151919][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.161836][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.171737][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.181626][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 524.191526][ C1] sd 0:0:1:0: [sg0] tag#5260 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x58, 0x0, &(0x7f00000004c0)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:59:09 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 05:59:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0xc000000000000000}, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) clone(0x1000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffc, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 05:59:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 524.870573][ T31] audit: type=1326 audit(1595311150.227:85): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14539 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f01a code=0x0 05:59:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:10 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x406855c9, &(0x7f0000000140)={0xc016}) 05:59:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) [ 525.311496][ C0] sd 0:0:1:0: [sg0] tag#5266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 525.322147][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB: Test Unit Ready [ 525.329071][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.338921][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.348787][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.358694][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.368549][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.378403][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.388342][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.398201][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.408063][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.417951][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.427855][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.437772][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.447698][ C0] sd 0:0:1:0: [sg0] tag#5266 CDB[c0]: 00 00 00 00 00 00 00 00 [ 525.504413][T14554] not chained 30000 origins [ 525.508939][T14554] CPU: 1 PID: 14554 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 525.513726][T14554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.513726][T14554] Call Trace: [ 525.513726][T14554] dump_stack+0x1df/0x240 [ 525.513726][T14554] ? psi_group_change+0x1007/0x13c0 [ 525.513726][T14554] kmsan_internal_chain_origin+0x6f/0x130 [ 525.513726][T14554] ? kmsan_get_metadata+0x11d/0x180 [ 525.513726][T14554] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 525.513726][T14554] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 525.513726][T14554] ? __perf_event_task_sched_in+0xa15/0xa80 [ 525.513726][T14554] ? kmsan_set_origin_checked+0x95/0xf0 [ 525.513726][T14554] ? kmsan_get_metadata+0x11d/0x180 [ 525.513726][T14554] ? kmsan_get_metadata+0x11d/0x180 [ 525.513726][T14554] ? kmsan_get_metadata+0x4f/0x180 [ 525.513726][T14554] ? kmsan_set_origin_checked+0x95/0xf0 [ 525.513726][T14554] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 525.513726][T14554] ? _copy_from_user+0x15b/0x260 [ 525.513726][T14554] ? kmsan_get_metadata+0x4f/0x180 [ 525.513726][T14554] __msan_chain_origin+0x50/0x90 [ 525.513726][T14554] do_recvmmsg+0x105a/0x1ee0 [ 525.513726][T14554] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 525.513726][T14554] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 525.513726][T14554] ? get_timespec64+0x24c/0x2e0 [ 525.513726][T14554] __se_sys_recvmmsg+0x25d/0x350 [ 525.513726][T14554] __x64_sys_recvmmsg+0x62/0x80 [ 525.513726][T14554] do_syscall_64+0xb0/0x150 [ 525.513726][T14554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.513726][T14554] RIP: 0033:0x45c1d9 [ 525.513726][T14554] Code: Bad RIP value. [ 525.513726][T14554] RSP: 002b:00007fe963e51c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 525.513726][T14554] RAX: ffffffffffffffda RBX: 0000000000025200 RCX: 000000000045c1d9 [ 525.513726][T14554] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000005 [ 525.513726][T14554] RBP: 000000000078bf50 R08: 0000000020003700 R09: 0000000000000000 [ 525.513726][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 525.513726][T14554] R13: 0000000000c9fb6f R14: 00007fe963e529c0 R15: 000000000078bf0c [ 525.513726][T14554] Uninit was stored to memory at: [ 525.513726][T14554] kmsan_internal_chain_origin+0xad/0x130 [ 525.513726][T14554] __msan_chain_origin+0x50/0x90 [ 525.513726][T14554] do_recvmmsg+0x105a/0x1ee0 [ 525.513726][T14554] __se_sys_recvmmsg+0x25d/0x350 [ 525.513726][T14554] __x64_sys_recvmmsg+0x62/0x80 [ 525.513726][T14554] do_syscall_64+0xb0/0x150 [ 525.513726][T14554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.513726][T14554] [ 525.513726][T14554] Uninit was stored to memory at: [ 525.513726][T14554] kmsan_internal_chain_origin+0xad/0x130 [ 525.513726][T14554] __msan_chain_origin+0x50/0x90 [ 525.513726][T14554] do_recvmmsg+0x105a/0x1ee0 [ 525.513726][T14554] __se_sys_recvmmsg+0x25d/0x350 [ 525.513726][T14554] __x64_sys_recvmmsg+0x62/0x80 [ 525.513726][T14554] do_syscall_64+0xb0/0x150 [ 525.513726][T14554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.513726][T14554] [ 525.513726][T14554] Uninit was stored to memory at: [ 525.513726][T14554] kmsan_internal_chain_origin+0xad/0x130 [ 525.513726][T14554] __msan_chain_origin+0x50/0x90 [ 525.513726][T14554] do_recvmmsg+0x105a/0x1ee0 [ 525.513726][T14554] __se_sys_recvmmsg+0x25d/0x350 [ 525.513726][T14554] __x64_sys_recvmmsg+0x62/0x80 [ 525.513726][T14554] do_syscall_64+0xb0/0x150 [ 525.513726][T14554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.513726][T14554] [ 525.513726][T14554] Uninit was stored to memory at: [ 525.513726][T14554] kmsan_internal_chain_origin+0xad/0x130 [ 525.513726][T14554] __msan_chain_origin+0x50/0x90 [ 525.513726][T14554] do_recvmmsg+0x105a/0x1ee0 [ 525.513726][T14554] __se_sys_recvmmsg+0x25d/0x350 [ 525.513726][T14554] __x64_sys_recvmmsg+0x62/0x80 [ 525.513726][T14554] do_syscall_64+0xb0/0x150 [ 525.513726][T14554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.513726][T14554] [ 525.513726][T14554] Uninit was stored to memory at: [ 525.513726][T14554] kmsan_internal_chain_origin+0xad/0x130 [ 525.513726][T14554] __msan_chain_origin+0x50/0x90 [ 525.513726][T14554] do_recvmmsg+0x105a/0x1ee0 [ 525.513726][T14554] __se_sys_recvmmsg+0x25d/0x350 [ 525.513726][T14554] __x64_sys_recvmmsg+0x62/0x80 [ 525.513726][T14554] do_syscall_64+0xb0/0x150 [ 525.513726][T14554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.513726][T14554] [ 525.513726][T14554] Uninit was stored to memory at: [ 525.513726][T14554] kmsan_internal_chain_origin+0xad/0x130 [ 525.513726][T14554] __msan_chain_origin+0x50/0x90 [ 525.513726][T14554] do_recvmmsg+0x105a/0x1ee0 [ 525.513726][T14554] __se_sys_recvmmsg+0x25d/0x350 [ 525.513726][T14554] __x64_sys_recvmmsg+0x62/0x80 [ 525.513726][T14554] do_syscall_64+0xb0/0x150 [ 525.513726][T14554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.513726][T14554] [ 525.513726][T14554] Uninit was stored to memory at: [ 525.513726][T14554] kmsan_internal_chain_origin+0xad/0x130 [ 525.513726][T14554] __msan_chain_origin+0x50/0x90 [ 525.513726][T14554] do_recvmmsg+0x105a/0x1ee0 [ 525.513726][T14554] __se_sys_recvmmsg+0x25d/0x350 [ 525.513726][T14554] __x64_sys_recvmmsg+0x62/0x80 [ 525.513726][T14554] do_syscall_64+0xb0/0x150 [ 525.513726][T14554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.513726][T14554] [ 525.513726][T14554] Local variable ----msg_sys@do_recvmmsg created at: [ 525.513726][T14554] do_recvmmsg+0xc5/0x1ee0 [ 525.513726][T14554] do_recvmmsg+0xc5/0x1ee0 [ 526.137776][ T31] audit: type=1800 audit(1595311151.497:86): pid=14553 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:59:11 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:11 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 526.404106][ C1] sd 0:0:1:0: [sg0] tag#5267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 526.414774][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB: Test Unit Ready [ 526.421398][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.431264][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.441120][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.451224][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.461094][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.471049][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.480991][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.490881][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.500784][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.510666][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.520511][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.530394][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 526.540282][ C1] sd 0:0:1:0: [sg0] tag#5267 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0xc0189436, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:12 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x40045569, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x4004556e, 0x0) 05:59:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x134, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x134}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x411}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:12 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 05:59:13 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:13 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 05:59:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 528.018384][ C1] sd 0:0:1:0: [sg0] tag#5276 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 528.029011][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB: Test Unit Ready [ 528.035796][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.045727][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.055669][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.065640][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.075562][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.085501][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.095401][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.105237][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 528.115161][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.125135][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.135083][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.145022][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 528.154924][ C1] sd 0:0:1:0: [sg0] tag#5276 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6}, 0x98) 05:59:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 528.768544][ T31] audit: type=1800 audit(1595311154.127:87): pid=14599 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r5 = dup2(r4, r4) dup2(r5, r0) 05:59:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="4b818d"], 0x5) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 05:59:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:14 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 529.253366][ C1] sd 0:0:1:0: [sg0] tag#5277 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 529.264022][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB: Test Unit Ready [ 529.270645][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.280576][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.290562][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.300495][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.310446][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.320386][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.330341][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.340301][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.350224][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.360222][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.370124][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.380046][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.390001][ C1] sd 0:0:1:0: [sg0] tag#5277 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 529.576067][T14636] IPVS: ftp: loaded support on port[0] = 21 05:59:14 executing program 0: unshare(0x64040600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f00000006c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 05:59:14 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6}, 0x98) 05:59:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000007c8008801c00010000000000000000000000000000000000000000000700000012000200000000000000000000000000000000001c0001000000000000000000000000000000000000000000030000000a00020000000000000000001c00010000000000000000000000000000000000000000000000000004000200080001007265640008010200040102006b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae696ecd2e676185f433e9a89a23"], 0x1b0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7fbffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6}, 0x98) 05:59:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:15 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:16 executing program 0: unshare(0x64040600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f00000006c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) [ 530.768396][ C1] sd 0:0:1:0: [sg0] tag#5282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 530.779070][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB: Test Unit Ready [ 530.785866][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.795749][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.805621][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.815520][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.825406][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.835310][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.845185][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.855105][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.865007][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.874942][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.884816][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.894682][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 530.904557][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 531.039497][T14689] IPVS: ftp: loaded support on port[0] = 21 05:59:16 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x2001}, {r1}], 0x2, 0x0) [ 531.324324][ T1447] tipc: TX() has been purged, node left! [ 531.343356][ T1447] tipc: TX() has been purged, node left! 05:59:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=ANY=[@ANYBLOB="b0010000fcc02400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x0) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x30, 0x0, 0x0) 05:59:17 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:17 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x700a2100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 05:59:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) r5 = dup2(r3, r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 532.141501][ C1] sd 0:0:1:0: [sg0] tag#5283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 532.152261][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB: Test Unit Ready [ 532.159038][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.168925][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.178799][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.188659][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.198530][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.208426][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.218316][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.228224][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 532.238115][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.248008][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.257885][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.267779][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 532.277652][ C1] sd 0:0:1:0: [sg0] tag#5283 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x4, 0x0) r2 = dup2(r0, r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local}}) 05:59:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:17 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_nanosleep(0x8, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 05:59:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x4a, 0x0, 0x0) 05:59:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x369}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:18 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080), 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:18 executing program 4: unshare(0x44000600) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) socket$inet6(0xa, 0x80000, 0xff7fff02) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="48010000100013070000000000000000ac1414aa000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x0) 05:59:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) read(r0, &(0x7f0000001000)=""/181, 0xb5) [ 533.587084][ C1] sd 0:0:1:0: [sg0] tag#5284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 533.597747][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB: Test Unit Ready [ 533.604538][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.614413][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.624286][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.634207][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.644087][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.653970][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.663833][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.673583][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.683463][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.693348][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.703238][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.713121][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.722978][ C1] sd 0:0:1:0: [sg0] tag#5284 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 533.802330][T14783] IPVS: ftp: loaded support on port[0] = 21 05:59:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) 05:59:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080), 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:19 executing program 0: clone(0x20002107ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:59:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080), 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:19 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 534.534351][T14783] IPVS: ftp: loaded support on port[0] = 21 05:59:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xd}, &(0x7f0000001fee)='R\x06r0s\xac\x84cusgrVex:De', 0x0) [ 534.941945][ C0] sd 0:0:1:0: [sg0] tag#5285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 534.952694][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB: Test Unit Ready [ 534.959474][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.969380][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.979285][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.989208][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.999091][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.009004][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.018911][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.028766][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.038638][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.048489][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.058351][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.068212][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 535.078051][ C0] sd 0:0:1:0: [sg0] tag#5285 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) 05:59:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x134, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 535.776807][T14867] binder: 14863:14867 ioctl c0306201 0 returned -14 05:59:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x1a) 05:59:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:21 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x4, 0x0) r2 = dup2(r0, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x46, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2f32e32a3b88aaf3c06f4970e85a6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:59:21 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x0) 05:59:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 536.450160][ C1] sd 0:0:1:0: [sg0] tag#5289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 536.460820][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB: Test Unit Ready [ 536.467677][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.477627][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.487541][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.497532][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.507535][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.517480][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.527434][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.537373][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x4, 0x0) r2 = dup2(r0, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 536.547308][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.557209][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.567129][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.577059][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 536.586992][ C1] sd 0:0:1:0: [sg0] tag#5289 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:22 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x185, 0x0) pipe(&(0x7f00000001c0)) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 537.034091][ T1447] tipc: TX() has been purged, node left! 05:59:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x4, 0x0) r2 = dup2(r0, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 537.194186][ T1447] tipc: TX() has been purged, node left! 05:59:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 537.364584][ T1447] tipc: TX() has been purged, node left! 05:59:22 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x185, 0x0) pipe(&(0x7f00000001c0)) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 05:59:22 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:22 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 537.831641][ C0] sd 0:0:1:0: [sg0] tag#5290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 537.842282][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB: Test Unit Ready [ 537.849113][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.858952][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.868806][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.878653][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.888508][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.898357][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.908216][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.918070][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf6, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2f32e32a3b88aaf3c06f4970e85a63c9a4b0d8b9aad9c9ba4c998db2f7155d302a7be122bb1609f8b0164eb12c07a0200169c864e1d5f8179cba2e431126de0592738cb993815a7d1b1ce34144ce1487e311e84395a80adbe3e7f3622703c353de8e6928bfd5a5f2cc05e4b942d6ed155b67a555f4b2e2b0cd0e93e41c330f70401e3d96f546e65fab4fae51bb32a6f3ca61632d15b0c1cec89839cd7fe16d03af16efd23907d097227db763548378b342df9dd9e5a725e1292d967083dd4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 537.928036][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.937898][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.947797][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.957698][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 537.967625][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x46, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2f32e32a3b88aaf3c06f4970e85a6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:59:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:24 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:24 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 539.427202][ C0] sd 0:0:1:0: [sg0] tag#5291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 539.437849][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB: Test Unit Ready [ 539.444682][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.454544][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.464462][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.474374][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.484215][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.494058][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.503938][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.513791][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x46, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2f32e32a3b88aaf3c06f4970e85a6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 539.523551][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.533400][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.543242][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.553104][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 539.562987][ C0] sd 0:0:1:0: [sg0] tag#5291 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:25 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:25 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:25 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 540.629533][ C1] sd 0:0:1:0: [sg0] tag#5292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 540.640213][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB: Test Unit Ready [ 540.647105][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.657078][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.667042][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.677005][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.686953][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.696890][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.706854][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.716848][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.726787][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.736763][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.746786][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.756699][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 540.766626][ C1] sd 0:0:1:0: [sg0] tag#5292 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf6, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2f32e32a3b88aaf3c06f4970e85a63c9a4b0d8b9aad9c9ba4c998db2f7155d302a7be122bb1609f8b0164eb12c07a0200169c864e1d5f8179cba2e431126de0592738cb993815a7d1b1ce34144ce1487e311e84395a80adbe3e7f3622703c353de8e6928bfd5a5f2cc05e4b942d6ed155b67a555f4b2e2b0cd0e93e41c330f70401e3d96f546e65fab4fae51bb32a6f3ca61632d15b0c1cec89839cd7fe16d03af16efd23907d097227db763548378b342df9dd9e5a725e1292d967083dd4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:59:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x46, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2f32e32a3b88aaf3c06f4970e85a6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:59:28 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x0, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 542.860278][ C1] sd 0:0:1:0: [sg0] tag#5299 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 542.871026][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB: Test Unit Ready [ 542.877893][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.887855][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.897841][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.907832][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.917874][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.927788][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.937728][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.947665][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xb9, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2f32e32a3b88aaf3c06f4970e85a63c9a4b0d8b9aad9c9ba4c998db2f7155d302a7be122bb1609f8b0164eb12c07a0200169c864e1d5f8179cba2e431126de0592738cb993815a7d1b1ce34144ce1487e311e84395a80adbe3e7f3622703c353de8e6928bfd5a5f2cc05e4b942d6ed155b67a555f4b2e2b0cd0e93e41c330f70401"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 542.957587][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.967488][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.977416][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.987356][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 542.997260][ C1] sd 0:0:1:0: [sg0] tag#5299 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x0, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "a7a9"}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x31f) 05:59:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x0, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:29 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 544.322108][ C1] sd 0:0:1:0: [sg0] tag#5300 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 544.332775][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB: Test Unit Ready [ 544.339613][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.349586][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.359510][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.369424][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.379324][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.389241][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.399119][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.409049][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.419299][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.429238][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.439257][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.449174][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 544.459101][ C1] sd 0:0:1:0: [sg0] tag#5300 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x0, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "a7a9"}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x31f) [ 544.524276][T15042] xt_NFQUEUE: number of total queues is 0 05:59:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x0, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:30 executing program 0: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x49db, 0x12) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x185, 0x0) socket(0x0, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000880), 0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @empty}]}}]}, 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 544.782957][T15051] xt_NFQUEUE: number of total queues is 0 05:59:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:30 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 545.384353][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.559143][ C0] sd 0:0:1:0: [sg0] tag#5301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 545.569774][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB: Test Unit Ready [ 545.576563][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.586423][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.596278][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.606127][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.615977][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.625832][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.635697][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.645546][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.655396][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.665234][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.675093][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.684936][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.694773][ C0] sd 0:0:1:0: [sg0] tag#5301 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:31 executing program 4: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) socket(0x0, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x8, 0x0, 0x400, 0x10, @private2, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x0, 0x3, 0x3}}) 05:59:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:31 executing program 0: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x49db, 0x12) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x185, 0x0) socket(0x0, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000880), 0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @empty}]}}]}, 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 05:59:32 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:32 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 05:59:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 547.249824][ C0] sd 0:0:1:0: [sg0] tag#5306 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 547.260548][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB: Test Unit Ready [ 547.267314][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.277156][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.287006][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.296919][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.306763][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.316610][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.326470][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.336318][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 547.346167][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.356016][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.365852][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.375699][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 547.385531][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:32 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x1) 05:59:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:33 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) 05:59:33 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) r1 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0x4}}]}, 0x34}}, 0x0) 05:59:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r1, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 548.474455][ C0] sd 0:0:1:0: [sg0] tag#5307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 548.485120][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB: Test Unit Ready [ 548.491745][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.501683][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.511518][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.521433][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.531302][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.541155][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.551001][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.560877][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.570773][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.580659][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.590598][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.600502][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 548.610413][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xc, 0x0, &(0x7f00000000c0)) 05:59:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:34 executing program 0: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) r1 = socket(0x0, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) 05:59:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:34 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:34 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x8200) recvmmsg(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=ANY=[@ANYBLOB='W'], 0x828}}, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a000000}]) 05:59:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 549.861965][ C0] sd 0:0:1:0: [sg0] tag#5308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 549.872603][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB: Test Unit Ready [ 549.879472][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.889419][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.899358][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.909255][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.919157][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.929104][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.938962][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.948872][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 549.958779][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.968687][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.978579][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.988492][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 549.998373][ C0] sd 0:0:1:0: [sg0] tag#5308 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:36 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 551.021020][ C0] sd 0:0:1:0: [sg0] tag#5311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 551.031673][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB: Test Unit Ready [ 551.038501][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.048415][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.058290][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000080)) [ 551.068218][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.078112][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.088013][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.097908][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.107834][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.117788][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.127685][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.137587][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.147499][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 551.157360][ C0] sd 0:0:1:0: [sg0] tag#5311 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:36 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffbf, &(0x7f0000000000)) 05:59:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 05:59:37 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) socket(0x0, 0x0, 0x0) 05:59:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:37 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 552.315264][ C1] sd 0:0:1:0: [sg0] tag#5252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 552.325976][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB: Test Unit Ready [ 552.332615][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.342574][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.352471][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.362395][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.372235][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.382120][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.392022][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.401929][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 552.411826][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.421700][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.431572][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.441436][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 552.451273][ C1] sd 0:0:1:0: [sg0] tag#5252 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 553.078162][ T31] audit: type=1800 audit(1595311178.436:88): pid=15241 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x5, 0x104) semctl$GETVAL(r2, 0x0, 0xc, 0x0) 05:59:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="8d", 0x1}], 0x1}, 0x0) io_submit(0x0, 0x0, 0x0) 05:59:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:38 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 553.570965][ C1] sd 0:0:1:0: [sg0] tag#5253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 553.581758][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB: Test Unit Ready [ 553.588586][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.598469][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.608447][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.618386][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.628263][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.638146][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.648045][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.657929][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.667819][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.677712][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.687606][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.697470][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 553.707360][ C1] sd 0:0:1:0: [sg0] tag#5253 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:39 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffbf, &(0x7f0000000000)) 05:59:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) exit_group(0x0) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x100000e, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) futex(0x0, 0x85, 0x50000000, 0x0, &(0x7f0000000000), 0x0) openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 05:59:39 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x0, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:39 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x185, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x803, 0x0) 05:59:40 executing program 4: [ 554.748793][ C1] sd 0:0:1:0: [sg0] tag#5257 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 554.759444][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB: Test Unit Ready [ 554.766336][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.776235][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.786095][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.796038][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.805918][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.815769][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.825646][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.835543][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 554.845404][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.855294][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.865169][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.875032][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 554.884907][ C1] sd 0:0:1:0: [sg0] tag#5257 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 555.463084][ T31] audit: type=1800 audit(1595311180.815:89): pid=15299 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:41 executing program 0: 05:59:41 executing program 4: 05:59:41 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x0, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x4, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 555.863317][ C1] sd 0:0:1:0: [sg0] tag#5258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 555.874070][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB: Test Unit Ready [ 555.880690][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.890678][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.901784][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.911681][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.921629][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.933081][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.942974][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.952865][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.962762][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.972651][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.982750][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 555.992629][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 556.002502][ C1] sd 0:0:1:0: [sg0] tag#5258 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:41 executing program 4: 05:59:41 executing program 0: 05:59:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:42 executing program 4: 05:59:42 executing program 0: 05:59:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:43 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x0, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:43 executing program 0: 05:59:43 executing program 4: [ 557.837290][ C1] sd 0:0:1:0: [sg0] tag#5261 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 557.848042][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB: Test Unit Ready [ 557.854888][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.864793][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.874657][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.884623][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.894503][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.904372][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.914245][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.924132][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.934130][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.944004][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.953934][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.963855][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.973621][ C1] sd 0:0:1:0: [sg0] tag#5261 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:43 executing program 0: 05:59:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:43 executing program 4: 05:59:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:43 executing program 0: [ 558.617658][ T31] audit: type=1800 audit(1595311183.975:90): pid=15353 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:44 executing program 0: 05:59:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:44 executing program 4: 05:59:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:44 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x0, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) 05:59:44 executing program 0: [ 559.263938][ C0] sd 0:0:1:0: [sg0] tag#5262 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 559.274642][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB: Test Unit Ready [ 559.281349][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.291299][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.301163][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.311050][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.320924][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.330788][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.340632][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.350485][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.360327][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.370185][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.380037][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.390063][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 559.399916][ C0] sd 0:0:1:0: [sg0] tag#5262 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:44 executing program 0: 05:59:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) 05:59:45 executing program 4: 05:59:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:45 executing program 4: 05:59:45 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x16f002) 05:59:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) 05:59:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:45 executing program 4: 05:59:45 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x0, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:45 executing program 0: [ 560.610084][ C1] sd 0:0:1:0: [sg0] tag#5269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 560.620808][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB: Test Unit Ready [ 560.627640][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.637621][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.647563][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.657533][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.667511][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.677452][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.687390][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.697338][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.707277][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.717219][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.727168][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.737105][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.747028][ C1] sd 0:0:1:0: [sg0] tag#5269 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:46 executing program 4: 05:59:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) 05:59:46 executing program 0: 05:59:46 executing program 4: [ 561.452367][ T31] audit: type=1800 audit(1595311186.785:91): pid=15410 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x1b0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x1b0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) 05:59:47 executing program 0: 05:59:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:47 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x0, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:47 executing program 4: [ 562.171042][ C1] sd 0:0:1:0: [sg0] tag#5275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 562.181844][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB: Test Unit Ready [ 562.188705][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.198623][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.208598][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.218514][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.228460][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.238390][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.248357][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.258385][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.268322][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.278380][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.288266][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.298153][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 562.308047][ C1] sd 0:0:1:0: [sg0] tag#5275 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:47 executing program 0: 05:59:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:47 executing program 4: 05:59:47 executing program 0: 05:59:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) 05:59:48 executing program 0: 05:59:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:48 executing program 4: 05:59:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x0, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:48 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x0, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:48 executing program 0: [ 563.667243][ C1] sd 0:0:1:0: [sg0] tag#5281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 563.677979][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB: Test Unit Ready [ 563.684821][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.694702][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.704850][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.714795][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.724663][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.734550][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.744437][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.754326][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.764210][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.774095][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.783975][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.793842][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 563.803622][ C1] sd 0:0:1:0: [sg0] tag#5281 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:49 executing program 4: 05:59:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x0, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:49 executing program 0: 05:59:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:49 executing program 4: 05:59:49 executing program 0: [ 564.420428][ T31] audit: type=1800 audit(1595311189.775:92): pid=15471 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x0, 0x801f, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:50 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x0, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:50 executing program 4: 05:59:50 executing program 0: 05:59:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 565.230028][ C1] sd 0:0:1:0: [sg0] tag#5282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 565.240809][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB: Test Unit Ready [ 565.247734][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.258137][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.268079][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.278059][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.287989][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.297914][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.307955][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.317911][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.327855][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.337800][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.347718][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.357661][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 565.367596][ C1] sd 0:0:1:0: [sg0] tag#5282 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0xd8, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:50 executing program 0: 05:59:51 executing program 4: 05:59:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 565.865101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 05:59:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:51 executing program 4: 05:59:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:51 executing program 0: 05:59:51 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x0, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x16, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:51 executing program 4: 05:59:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 566.708269][ C0] sd 0:0:1:0: [sg0] tag#5289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 566.718913][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB: Test Unit Ready [ 566.725739][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.735592][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.745436][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.755366][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.765379][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.775260][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.785158][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.795046][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.804937][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.814822][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.824726][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.834636][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 566.844524][ C0] sd 0:0:1:0: [sg0] tag#5289 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:52 executing program 4: 05:59:52 executing program 0: 05:59:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x68, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:52 executing program 0: 05:59:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:52 executing program 4: [ 567.452248][ T31] audit: type=1800 audit(1595311192.805:93): pid=15527 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:53 executing program 0: 05:59:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:53 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:53 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x400) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x68002100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 05:59:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 568.009918][ C0] sd 0:0:1:0: [sg0] tag#5290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 568.020613][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB: Test Unit Ready [ 568.027435][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.037361][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.047291][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.057233][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.067125][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.077039][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.086949][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.096847][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.106740][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.116674][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.126564][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.136468][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 568.146313][ C0] sd 0:0:1:0: [sg0] tag#5290 CDB[c0]: 00 00 00 00 00 00 00 00 [ 568.151158][T15556] IPVS: ftp: loaded support on port[0] = 21 [ 568.186098][T15557] IPVS: ftp: loaded support on port[0] = 21 05:59:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x1}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xd, 0x4, 0x4, 0x123, 0xd, r0, 0x0, [0x305f, 0xa, 0x300, 0x1800, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8]}, 0x40) 05:59:53 executing program 4: 05:59:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0xa0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}]}, 0xa0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 568.684789][ T1447] tipc: TX() has been purged, node left! 05:59:54 executing program 0: 05:59:54 executing program 4: 05:59:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:54 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0xa0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}]}, 0xa0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:54 executing program 0: 05:59:54 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$inet6(0xa, 0x0, 0xff) close(r1) [ 569.547456][ C0] sd 0:0:1:0: [sg0] tag#5298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 569.558159][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB: Test Unit Ready [ 569.564966][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.574828][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.584688][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.594597][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.604464][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.614307][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.624148][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.633985][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5453, 0x0) [ 569.643842][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.653600][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.663452][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.673304][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 569.683162][ C0] sd 0:0:1:0: [sg0] tag#5298 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:55 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x4, 0xc, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 05:59:55 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$inet6(0xa, 0x0, 0xff) close(r1) 05:59:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 570.317307][ T31] audit: type=1800 audit(1595311195.675:94): pid=15628 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0xa0, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}]}, 0xa0}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="19000016010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @dev}]}, 0x2c}}, 0x0) 05:59:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:56 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xe4, 0x0, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0xac, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x4}}]}, 0xac}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="19000016010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @dev}]}, 0x2c}}, 0x0) 05:59:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00050200000040000000000a000000", @ANYRES32=r4, @ANYBLOB="00000a00140001"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) [ 571.447962][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 571.674291][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 05:59:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xe4, 0x0, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0xac, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x4}}]}, 0xac}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:57 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) 05:59:57 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x2c}}, 0x0) 05:59:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xe4, 0x0, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) [ 572.719197][ C0] sd 0:0:1:0: [sg0] tag#5306 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 572.729927][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB: Test Unit Ready [ 572.736712][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.746559][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.756435][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.766350][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.776215][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.786074][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.795932][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.805910][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0xac, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x4}}]}, 0xac}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:58 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\xef\xffZ\xff\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) 05:59:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1}, 0x2c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r2, 0x4) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r2, 0x0, &(0x7f00000001c0)=""/131}, 0x20) [ 572.815755][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.825630][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.835612][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.845491][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 572.855377][ C0] sd 0:0:1:0: [sg0] tag#5306 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xe4, 0x4, 0x0, @private, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000380)={0x1, {&(0x7f0000000480)=""/81, 0x51, 0x0}}, 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:58 executing program 0: timer_create(0x0, &(0x7f000049efa0)={0x0, 0x3}, &(0x7f0000044000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x180) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) [ 573.462778][ T31] audit: type=1800 audit(1595311198.815:95): pid=15717 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.current" dev="sda1" ino=15740 res=0 05:59:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 05:59:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x134, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:59 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 05:59:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xe4, 0x4, 0x0, @private, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000380)={0x1, {&(0x7f0000000480)=""/81, 0x51, 0x0}}, 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 573.764370][ T1447] tipc: TX() has been purged, node left! 05:59:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyS3\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x541e, 0x0) [ 573.945844][ C0] sd 0:0:1:0: [sg0] tag#5307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 573.956476][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB: Test Unit Ready [ 573.963083][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.973056][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.983072][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 573.993020][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.002929][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.013544][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.023511][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.033421][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:59:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) [ 574.043357][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.053292][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.063211][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.073139][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 574.083042][ C0] sd 0:0:1:0: [sg0] tag#5307 CDB[c0]: 00 00 00 00 00 00 00 00 05:59:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xe4, 0x4, 0x0, @private, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}, @ra={0x94, 0x4}]}}}}}) 05:59:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x134, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 05:59:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5453, 0x0) 05:59:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 06:00:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}]}}}}}) 06:00:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/221, 0xdd}], 0x3}}], 0x3, 0x0, 0x0) 06:00:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x134, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 06:00:00 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83afc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d000000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 06:00:00 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001400)) 06:00:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}]}}}}}) [ 575.495893][ C0] sd 0:0:1:0: [sg0] tag#5251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 575.506669][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB: Test Unit Ready [ 575.513306][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.523304][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.533266][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.543181][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.553103][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.563009][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.572896][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.582836][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:00:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x190, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}, @qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "6b1c684768fe3c0bf00b7f12eb8cfd0bfec2f11ecb8f87e8de5c105acb219b0a8f4c111ad53620401ca12d736070919840b5ecabc5a429b3dc5c20de3fb410cde8a13006dc3e93af9591159c84c14ee01cb99631bdf5dc42710e08999b7d93ef594127b64413346ecedcc81a268e2313067efc9bda524ddf6a39a5ffd23a0e21e0366a63c542355e163f03f6d27c2e07658e66e42f8a9019ce4130c19573a9415655dd191eec46db7883953e6be05f469ce9681a7e481fe4e4fb032e2615163a5d4d6359af209f71303a43dabde1244263287658201f2649380743761fab7649248164d6f78051323c6a6cd1b68d8d3e3d95ae699568bb02124e0149e9a89a23"}]}}]}, 0x190}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x412}, {&(0x7f0000000000)=""/22, 0x18}], 0x81, &(0x7f0000000600)=""/191, 0x41, 0x94100000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 575.592739][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.602627][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.612552][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.622479][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 575.632427][ C0] sd 0:0:1:0: [sg0] tag#5251 CDB[c0]: 00 00 00 00 00 00 00 00 06:00:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 06:00:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) r4 = dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0xe4, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x1b, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast, @local]}, @noop, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x9, [{@multicast2, 0x40}, {@loopback, 0x2}]}]}}}}}) [ 576.019228][T15802] ===================================================== [ 576.023654][T15802] BUG: KMSAN: uninit-value in nf_conntrack_udplite_packet+0x4e8/0x1110 [ 576.023654][T15802] CPU: 0 PID: 15802 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 576.023654][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.052396][T15802] Call Trace: [ 576.052396][T15802] dump_stack+0x1df/0x240 [ 576.052396][T15802] kmsan_report+0xf7/0x1e0 [ 576.063949][T15802] __msan_warning+0x58/0xa0 [ 576.063949][T15802] nf_conntrack_udplite_packet+0x4e8/0x1110 [ 576.063949][T15802] nf_conntrack_in+0x93d/0x26b1 [ 576.063949][T15802] ipv6_conntrack_local+0x68/0x80 [ 576.063949][T15802] ? ipv6_conntrack_in+0x80/0x80 [ 576.063949][T15802] nf_hook_slow+0x16e/0x400 [ 576.063949][T15802] __ip6_local_out+0x56d/0x750 [ 576.063949][T15802] ? __ip6_local_out+0x750/0x750 [ 576.063949][T15802] ip6_local_out+0xa4/0x1d0 [ 576.063949][T15802] ip6_send_skb+0xfa/0x390 [ 576.063949][T15802] udp_v6_send_skb+0x1834/0x1e80 [ 576.063949][T15802] udpv6_sendmsg+0x4570/0x4940 [ 576.063949][T15802] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 576.063949][T15802] ? aa_label_sk_perm+0x767/0x930 [ 576.063949][T15802] ? udpv6_sendmsg+0x4940/0x4940 [ 576.063949][T15802] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 576.063949][T15802] ? aa_sk_perm+0x83c/0xcd0 [ 576.063949][T15802] ? udpv6_rcv+0x70/0x70 [ 576.063949][T15802] ? udpv6_rcv+0x70/0x70 [ 576.063949][T15802] inet6_sendmsg+0x276/0x2e0 [ 576.063949][T15802] kernel_sendmsg+0x24a/0x440 [ 576.063949][T15802] sock_no_sendpage+0x235/0x300 [ 576.063949][T15802] ? sock_no_mmap+0x30/0x30 [ 576.063949][T15802] sock_sendpage+0x1e1/0x2c0 [ 576.063949][T15802] pipe_to_sendpage+0x38c/0x4c0 [ 576.063949][T15802] ? sock_fasync+0x250/0x250 [ 576.063949][T15802] __splice_from_pipe+0x565/0xf00 [ 576.063949][T15802] ? generic_splice_sendpage+0x2d0/0x2d0 [ 576.063949][T15802] generic_splice_sendpage+0x1d5/0x2d0 [ 576.063949][T15802] ? iter_file_splice_write+0x1800/0x1800 [ 576.063949][T15802] direct_splice_actor+0x1fd/0x580 [ 576.063949][T15802] ? kmsan_get_metadata+0x4f/0x180 [ 576.063949][T15802] splice_direct_to_actor+0x6b2/0xf50 [ 576.063949][T15802] ? do_splice_direct+0x580/0x580 [ 576.063949][T15802] do_splice_direct+0x342/0x580 [ 576.063949][T15802] do_sendfile+0x101b/0x1d40 [ 576.063949][T15802] __se_sys_sendfile64+0x2bb/0x360 [ 576.063949][T15802] ? kmsan_get_metadata+0x4f/0x180 [ 576.063949][T15802] __x64_sys_sendfile64+0x56/0x70 [ 576.063949][T15802] do_syscall_64+0xb0/0x150 [ 576.063949][T15802] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.063949][T15802] RIP: 0033:0x45c1d9 [ 576.063949][T15802] Code: Bad RIP value. [ 576.063949][T15802] RSP: 002b:00007fc1d7134c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 576.063949][T15802] RAX: ffffffffffffffda RBX: 00000000000260c0 RCX: 000000000045c1d9 [ 576.063949][T15802] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 576.063949][T15802] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 576.063949][T15802] R10: 000000000000a808 R11: 0000000000000246 R12: 000000000078bf0c [ 576.063949][T15802] R13: 0000000000c9fb6f R14: 00007fc1d71359c0 R15: 000000000078bf0c [ 576.063949][T15802] [ 576.063949][T15802] Uninit was stored to memory at: [ 576.063949][T15802] kmsan_internal_chain_origin+0xad/0x130 [ 576.063949][T15802] __msan_chain_origin+0x50/0x90 [ 576.063949][T15802] udp_v6_send_skb+0x19f5/0x1e80 [ 576.063949][T15802] udpv6_sendmsg+0x4570/0x4940 [ 576.063949][T15802] inet6_sendmsg+0x276/0x2e0 [ 576.063949][T15802] kernel_sendmsg+0x24a/0x440 [ 576.063949][T15802] sock_no_sendpage+0x235/0x300 [ 576.063949][T15802] sock_sendpage+0x1e1/0x2c0 [ 576.063949][T15802] pipe_to_sendpage+0x38c/0x4c0 [ 576.063949][T15802] __splice_from_pipe+0x565/0xf00 [ 576.063949][T15802] generic_splice_sendpage+0x1d5/0x2d0 [ 576.063949][T15802] direct_splice_actor+0x1fd/0x580 [ 576.063949][T15802] splice_direct_to_actor+0x6b2/0xf50 [ 576.063949][T15802] do_splice_direct+0x342/0x580 [ 576.063949][T15802] do_sendfile+0x101b/0x1d40 [ 576.063949][T15802] __se_sys_sendfile64+0x2bb/0x360 [ 576.063949][T15802] __x64_sys_sendfile64+0x56/0x70 [ 576.063949][T15802] do_syscall_64+0xb0/0x150 [ 576.063949][T15802] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.063949][T15802] [ 576.063949][T15802] Uninit was stored to memory at: [ 576.063949][T15802] kmsan_internal_chain_origin+0xad/0x130 [ 576.063949][T15802] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 576.063949][T15802] kmsan_memcpy_metadata+0xb/0x10 [ 576.063949][T15802] __msan_memcpy+0x43/0x50 [ 576.063949][T15802] _copy_from_iter_full+0xbfe/0x13b0 [ 576.063949][T15802] udplite_getfrag+0xb1/0x130 [ 576.063949][T15802] __ip6_append_data+0x507b/0x6320 [ 576.063949][T15802] ip6_make_skb+0x6ce/0xcf0 [ 576.063949][T15802] udpv6_sendmsg+0x42f4/0x4940 [ 576.063949][T15802] inet6_sendmsg+0x276/0x2e0 [ 576.063949][T15802] kernel_sendmsg+0x24a/0x440 [ 576.063949][T15802] sock_no_sendpage+0x235/0x300 [ 576.063949][T15802] sock_sendpage+0x1e1/0x2c0 [ 576.063949][T15802] pipe_to_sendpage+0x38c/0x4c0 [ 576.063949][T15802] __splice_from_pipe+0x565/0xf00 [ 576.063949][T15802] generic_splice_sendpage+0x1d5/0x2d0 [ 576.063949][T15802] direct_splice_actor+0x1fd/0x580 [ 576.063949][T15802] splice_direct_to_actor+0x6b2/0xf50 [ 576.063949][T15802] do_splice_direct+0x342/0x580 [ 576.063949][T15802] do_sendfile+0x101b/0x1d40 [ 576.063949][T15802] __se_sys_sendfile64+0x2bb/0x360 [ 576.063949][T15802] __x64_sys_sendfile64+0x56/0x70 [ 576.063949][T15802] do_syscall_64+0xb0/0x150 [ 576.063949][T15802] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.063949][T15802] [ 576.063949][T15802] Uninit was created at: [ 576.063949][T15802] kmsan_save_stack_with_flags+0x3c/0x90 [ 576.063949][T15802] kmsan_alloc_page+0xb9/0x180 [ 576.063949][T15802] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 576.063949][T15802] alloc_pages_current+0x672/0x990 [ 576.063949][T15802] push_pipe+0x605/0xb70 [ 576.063949][T15802] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 576.063949][T15802] do_splice_to+0x4fc/0x14f0 [ 576.063949][T15802] splice_direct_to_actor+0x45c/0xf50 [ 576.063949][T15802] do_splice_direct+0x342/0x580 [ 576.063949][T15802] do_sendfile+0x101b/0x1d40 [ 576.063949][T15802] __se_sys_sendfile64+0x2bb/0x360 [ 576.063949][T15802] __x64_sys_sendfile64+0x56/0x70 [ 576.063949][T15802] do_syscall_64+0xb0/0x150 [ 576.063949][T15802] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.063949][T15802] ===================================================== [ 576.063949][T15802] Disabling lock debugging due to kernel taint [ 576.063949][T15802] Kernel panic - not syncing: panic_on_warn set ... [ 576.063949][T15802] CPU: 0 PID: 15802 Comm: syz-executor.4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 576.063949][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.063949][T15802] Call Trace: [ 576.063949][T15802] dump_stack+0x1df/0x240 [ 576.063949][T15802] panic+0x3d5/0xc3e [ 576.063949][T15802] kmsan_report+0x1df/0x1e0 [ 576.063949][T15802] __msan_warning+0x58/0xa0 [ 576.063949][T15802] nf_conntrack_udplite_packet+0x4e8/0x1110 [ 576.063949][T15802] nf_conntrack_in+0x93d/0x26b1 [ 576.063949][T15802] ipv6_conntrack_local+0x68/0x80 [ 576.063949][T15802] ? ipv6_conntrack_in+0x80/0x80 [ 576.063949][T15802] nf_hook_slow+0x16e/0x400 [ 576.063949][T15802] __ip6_local_out+0x56d/0x750 [ 576.063949][T15802] ? __ip6_local_out+0x750/0x750 [ 576.063949][T15802] ip6_local_out+0xa4/0x1d0 [ 576.063949][T15802] ip6_send_skb+0xfa/0x390 [ 576.063949][T15802] udp_v6_send_skb+0x1834/0x1e80 [ 576.063949][T15802] udpv6_sendmsg+0x4570/0x4940 [ 576.063949][T15802] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 576.063949][T15802] ? aa_label_sk_perm+0x767/0x930 [ 576.063949][T15802] ? udpv6_sendmsg+0x4940/0x4940 [ 576.063949][T15802] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 576.063949][T15802] ? aa_sk_perm+0x83c/0xcd0 [ 576.063949][T15802] ? udpv6_rcv+0x70/0x70 [ 576.063949][T15802] ? udpv6_rcv+0x70/0x70 [ 576.063949][T15802] inet6_sendmsg+0x276/0x2e0 [ 576.063949][T15802] kernel_sendmsg+0x24a/0x440 [ 576.063949][T15802] sock_no_sendpage+0x235/0x300 [ 576.063949][T15802] ? sock_no_mmap+0x30/0x30 [ 576.063949][T15802] sock_sendpage+0x1e1/0x2c0 [ 576.063949][T15802] pipe_to_sendpage+0x38c/0x4c0 [ 576.063949][T15802] ? sock_fasync+0x250/0x250 [ 576.063949][T15802] __splice_from_pipe+0x565/0xf00 [ 576.063949][T15802] ? generic_splice_sendpage+0x2d0/0x2d0 [ 576.063949][T15802] generic_splice_sendpage+0x1d5/0x2d0 [ 576.063949][T15802] ? iter_file_splice_write+0x1800/0x1800 [ 576.063949][T15802] direct_splice_actor+0x1fd/0x580 [ 576.063949][T15802] ? kmsan_get_metadata+0x4f/0x180 [ 576.063949][T15802] splice_direct_to_actor+0x6b2/0xf50 [ 576.063949][T15802] ? do_splice_direct+0x580/0x580 [ 576.063949][T15802] do_splice_direct+0x342/0x580 [ 576.063949][T15802] do_sendfile+0x101b/0x1d40 [ 576.063949][T15802] __se_sys_sendfile64+0x2bb/0x360 [ 576.063949][T15802] ? kmsan_get_metadata+0x4f/0x180 [ 576.063949][T15802] __x64_sys_sendfile64+0x56/0x70 [ 576.063949][T15802] do_syscall_64+0xb0/0x150 [ 576.063949][T15802] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.063949][T15802] RIP: 0033:0x45c1d9 [ 576.063949][T15802] Code: Bad RIP value. [ 576.063949][T15802] RSP: 002b:00007fc1d7134c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 576.063949][T15802] RAX: ffffffffffffffda RBX: 00000000000260c0 RCX: 000000000045c1d9 [ 576.063949][T15802] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 576.063949][T15802] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 576.063949][T15802] R10: 000000000000a808 R11: 0000000000000246 R12: 000000000078bf0c [ 576.063949][T15802] R13: 0000000000c9fb6f R14: 00007fc1d71359c0 R15: 000000000078bf0c [ 576.063949][T15802] Kernel Offset: 0x15800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 576.063949][T15802] Rebooting in 86400 seconds..